oasis_test 0.1.13 → 0.1.14

package/dist/index.js

@@ -161,6 +161,7 @@ function fold(model, op) {
         author: op.actor,
         body: p2.body,
         state: "open",
+        createdAt: op.timestamp,
         thread: [],
         raisedFrom: p2.raisedFrom ?? null,
         raisedFromRev: p2.raisedFromRev ?? null,
@@ -1744,14 +1745,18 @@ var init_kernel = __esm({
           const override = await this.resolveReviewerOverride?.(artifact.owner, artifact);
           const overrideApplied = !!override && override.length > 0;
           const configured = overrideApplied ? override : gateSpec.reviewers.flatMap((role) => this.roleIndex.get(role) ?? []);
-          const eligible = [...new Set(configured)].filter((a) => a !== head.author);
+          const configuredUnique = [...new Set(configured)];
+          const eligible = configuredUnique.filter((a) => a !== head.author);
           const quorum = overrideApplied ? Math.min(gateSpec.quorum, Math.max(1, eligible.length)) : gateSpec.quorum;
           if (eligible.length < quorum) {
-            throw new KernelError(
-              `\u6536\u5C3E gate \u65E0\u6CD5\u6EE1\u8DB3\uFF1A\u5408\u683C reviewer ${eligible.length} \u4EBA < quorum ${quorum}\uFF08reviewers=${eligible.join(",") || "none"}\uFF1Broles=${gateSpec.reviewers.join(",")}\uFF0C\u5DF2\u5254\u9664 head \u4F5C\u8005 ${head.author}\uFF09\u2014\u2014\u914D\u7F6E\u95EE\u9898\u8981\u54CD\u4EAE\uFF0C\u4E0D\u9759\u9ED8\u653E\u884C`
-            );
+            if (!(configuredUnique.includes(head.author) && configuredUnique.length >= quorum)) {
+              throw new KernelError(
+                `\u6536\u5C3E gate \u65E0\u6CD5\u6EE1\u8DB3\uFF1A\u5408\u683C reviewer ${eligible.length} \u4EBA < quorum ${quorum}\uFF08reviewers=${eligible.join(",") || "none"}\uFF1Broles=${gateSpec.reviewers.join(",")}\uFF0C\u5DF2\u5254\u9664 head \u4F5C\u8005 ${head.author}\uFF09\u2014\u2014\u914D\u7F6E\u95EE\u9898\u8981\u54CD\u4EAE\uFF0C\u4E0D\u9759\u9ED8\u653E\u884C`
+              );
+            }
+          } else {
+            gate = { quorum, eligible };
           }
-          gate = { quorum, eligible };
         }
         const payload = {
           ...args.note !== void 0 ? { note: args.note } : {},
@@ -3303,14 +3308,26 @@ var init_dispatcher = __esm({
           ...this.opts.resolveActorContext !== void 0 ? { resolveActorContext: this.opts.resolveActorContext } : {},
           ...materializeSkills ? { materializeSkills } : {}
         });
+        const limits = { wallClockMs: this.wallClockFor(spec.artifactId) };
+        const credentialCtx = {
+          actor: spec.actor,
+          artifactId: spec.artifactId,
+          action: spec.action,
+          ...spec.part !== void 0 ? { part: spec.part } : {},
+          ...binding !== void 0 ? { binding } : {},
+          limits
+        };
+        const serverUrl = this.opts.serverUrlFor ? await this.opts.serverUrlFor(credentialCtx) : this.opts.serverUrl;
+        const tokenFor = this.opts.tokenFor ?? ((a, _ctx) => `token:${a}`);
+        const actorToken = tokenFor(spec.actor, credentialCtx);
         const provisioned = this.opts.provision ? await this.opts.provision(spec.actor) : void 0;
         const job = {
           actor: spec.actor,
-          actorToken: (this.opts.tokenFor ?? ((a) => `token:${a}`))(spec.actor),
+          actorToken,
           artifactId: spec.artifactId,
           bundle: { files: bundle.files },
-          server: { url: this.opts.serverUrl },
-          limits: { wallClockMs: this.wallClockFor(spec.artifactId) },
+          server: { url: serverUrl },
+          limits,
           ...binding !== void 0 ? { binding } : {},
           ...provisioned?.env && Object.keys(provisioned.env).length > 0 ? { env: provisioned.env } : {},
           ...provisioned?.wrapperPaths && provisioned.wrapperPaths.length > 0 ? { wrapperPaths: provisioned.wrapperPaths } : {}
@@ -3333,6 +3350,7 @@ var init_dispatcher = __esm({
             artifactId: spec.artifactId,
             actor: spec.actor,
             action: spec.action,
+            ...binding?.runtimeKind ? { runtimeKind: binding.runtimeKind } : {},
             bundleManifest: manifest,
             startedAt: (/* @__PURE__ */ new Date()).toISOString()
           };
@@ -3481,7 +3499,7 @@ var init_dispatcher = __esm({
         if (!artifact) return false;
         if (!artifact.owner.startsWith("actor:agent:")) return false;
         if (lifecycleOf(model, spec.artifactId) !== "active") return false;
-        if (isConcluded(model, spec.artifactId)) return false;
+        if (isConcluded(model, spec.artifactId) && concludedHead(model, spec.artifactId) === artifact.currentRev) return false;
         if (pendingConcludeAttempt(model, spec.artifactId)) return false;
         if (!artifact.currentRev) return false;
         if (queueOf(model, spec.artifactId).length > 0) return false;
@@ -16436,7 +16454,7 @@ var require_compile = __commonJS({
       }
     }
     exports2.compileSchema = compileSchema;
-    function resolveRef(root, baseId, ref) {
+    function resolveRef2(root, baseId, ref) {
       var _a;
       ref = (0, resolve_1.resolveUrl)(this.opts.uriResolver, baseId, ref);
       const schOrFunc = root.refs[ref];
@@ -16453,7 +16471,7 @@ var require_compile = __commonJS({
         return;
       return root.refs[ref] = inlineOrCompile.call(this, _sch);
     }
-    exports2.resolveRef = resolveRef;
+    exports2.resolveRef = resolveRef2;
     function inlineOrCompile(sch) {
       if ((0, resolve_1.inlineRef)(sch.schema, this.opts.inlineRefs))
         return sch.schema;
@@ -20334,12 +20352,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f2;
     };
-    function addFormats(ajv, list, fs16, exportName) {
+    function addFormats(ajv, list, fs17, exportName) {
       var _a;
       var _b;
       (_a = (_b = ajv.opts.code).formats) !== null && _a !== void 0 ? _a : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f2 of list)
-        ajv.addFormat(f2, fs16[f2]);
+        ajv.addFormat(f2, fs17[f2]);
     }
     module2.exports = exports2 = formatsPlugin;
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -20527,16 +20545,35 @@ var init_drafts = __esm({
 });
 
 // ../server/src/governance/workorder-drafts.ts
-var WorkorderDraftStore;
+var import_node_fs, WorkorderDraftStore;
 var init_workorder_drafts = __esm({
   "../server/src/governance/workorder-drafts.ts"() {
     "use strict";
+    import_node_fs = __toESM(require("node:fs"), 1);
     WorkorderDraftStore = class {
+      constructor(file) {
+        this.file = file;
+        if (file && import_node_fs.default.existsSync(file)) {
+          try {
+            const data = JSON.parse(import_node_fs.default.readFileSync(file, "utf8"));
+            this.seq = data.seq ?? 0;
+            for (const d of data.drafts ?? []) this.drafts.set(d.id, d);
+          } catch {
+          }
+        }
+      }
       drafts = /* @__PURE__ */ new Map();
       seq = 0;
+      persist() {
+        if (!this.file) return;
+        const tmp = `${this.file}.tmp`;
+        import_node_fs.default.writeFileSync(tmp, JSON.stringify({ seq: this.seq, drafts: [...this.drafts.values()] }));
+        import_node_fs.default.renameSync(tmp, this.file);
+      }
       submit(d) {
         const draft = { ...d, id: `wodraft:${++this.seq}`, at: (/* @__PURE__ */ new Date()).toISOString() };
         this.drafts.set(draft.id, draft);
+        this.persist();
         return draft;
       }
       list() {
@@ -20546,16 +20583,159 @@ var init_workorder_drafts = __esm({
       forWorkspace(workspace) {
         return [...this.drafts.values()].reverse().find((d) => d.workspace === workspace);
       }
+      /** 按 chat 会话取最新一份：agent 不自带 ws（后端生成）时，friday 据本会话 id 取回它刚建的草案。 */
+      forSession(chatSessionId) {
+        return [...this.drafts.values()].reverse().find((d) => d.chatSessionId === chatSessionId);
+      }
+      /** 给草案打上 chat 会话标（建单经 chat 路时，/api/cmd 拿到 X-Chat-Session-Id 后调）。 */
+      tagSession(draftId, chatSessionId) {
+        const d = this.drafts.get(draftId);
+        if (d) {
+          d.chatSessionId = chatSessionId;
+          this.persist();
+        }
+      }
       get(id) {
         return this.drafts.get(id);
       }
       remove(id) {
-        return this.drafts.delete(id);
+        const ok = this.drafts.delete(id);
+        if (ok) this.persist();
+        return ok;
       }
     };
   }
 });
 
+// ../server/src/governance/draft-edit.ts
+function resolveRef(ref, draft) {
+  const res = resolveNodeRef(ref, candidatesOf(draft));
+  if (res.ok) return res.id;
+  if (res.reason === "ambiguous")
+    throw new Error(`\u300C${ref}\u300D\u5728\u672C\u8349\u6848\u5339\u914D\u5230\u591A\u4E2A\u8282\u70B9\uFF0C\u8BF7\u66F4\u5177\u4F53\uFF08type:title \u6216 id\uFF09\uFF1A${res.candidates.map((c) => `${c.type}:${c.title ?? "?"}`).join("\u3001")}`);
+  throw new Error(`\u300C${ref}\u300D\u5728\u672C\u8349\u6848\u91CC\u627E\u4E0D\u5230\u5BF9\u5E94\u8282\u70B9\uFF08\u53EF\u7528 type / type:title / id\uFF09`);
+}
+function editDraftPlan(draft, op) {
+  switch (op.action) {
+    case "spawn": {
+      const title = op.title?.trim();
+      if (!title) throw new Error("\u7ED9\u8349\u6848\u52A0\u8282\u70B9\u8981 --title\uFF08\u636E (type,title) \u6D3E\u751F id\uFF09");
+      if (candidatesOf(draft).some((c) => c.type === op.type && (c.title ?? "").toLowerCase() === title.toLowerCase()))
+        throw new Error(`\u8282\u70B9 title \u649E\u540D\uFF1A${op.type}\u300C${title}\u300D\u8349\u6848\u91CC\u5DF2\u6709\uFF0C\u6362\u4E2A\u533A\u5206\u7684\u540D`);
+      const used = new Set(spawnOps(draft).map((o) => o.id));
+      const id = deriveArtifactId(op.type, draft.workspace, title, used);
+      const inputs = op.inputs?.map((e) => ({ to: resolveRef(e.to, draft), ...e.required !== void 0 ? { required: e.required } : {} }));
+      draft.plan.ops.push({
+        action: "spawn",
+        id,
+        type: op.type,
+        workspace: draft.workspace,
+        title,
+        ...op.description !== void 0 ? { description: op.description } : {},
+        ...op.fields ? { fields: op.fields } : {},
+        ...inputs && inputs.length > 0 ? { inputs } : {}
+      });
+      if (op.description) draft.plan.ops.push({ action: "annotate", artifactId: id, body: op.description, blocks: false });
+      break;
+    }
+    case "edit": {
+      const id = resolveRef(op.artifactId, draft);
+      const target = spawnOps(draft).find((o) => o.id === id);
+      if (!target) throw new Error(`\u8349\u6848\u91CC\u6CA1\u6709\u8282\u70B9 ${id} \u7684 spawn`);
+      if (op.title !== void 0) target.title = op.title;
+      if (op.fields) target.fields = { ...target.fields ?? {}, ...op.fields };
+      if (op.description !== void 0) {
+        target.description = op.description;
+        const ann = draft.plan.ops.find((o) => o.action === "annotate" && o.artifactId === id);
+        if (ann && ann.action === "annotate") ann.body = op.description;
+        else draft.plan.ops.push({ action: "annotate", artifactId: id, body: op.description, blocks: false });
+      }
+      break;
+    }
+    case "link": {
+      const consumer = resolveRef(op.artifactId, draft);
+      const upstream = resolveRef(op.to, draft);
+      draft.plan.ops.push({ action: "link", artifactId: consumer, to: upstream, ...op.required !== void 0 ? { required: op.required } : {} });
+      break;
+    }
+    case "unlink": {
+      const consumer = resolveRef(op.artifactId, draft);
+      const upstream = resolveRef(op.to, draft);
+      draft.plan.ops = draft.plan.ops.filter((o) => !(o.action === "link" && o.artifactId === consumer && o.to === upstream));
+      for (const o of draft.plan.ops) if (o.action === "spawn" && o.id === consumer && o.inputs) o.inputs = o.inputs.filter((e) => e.to !== upstream);
+      break;
+    }
+    case "seal": {
+      if (op.reason !== "cancelled") throw new Error(`\u8349\u6848\u8282\u70B9\u53EA\u652F\u6301 cancel\uFF08\u5220\u9664\uFF09\uFF0C\u4E0D\u652F\u6301 ${op.reason}\u2014\u2014\u8282\u70B9\u8FD8\u6CA1\u843D\u5E93`);
+      const id = resolveRef(op.artifactId, draft);
+      draft.plan.ops = draft.plan.ops.filter((o) => {
+        if (o.action === "spawn" && o.id === id) return false;
+        if (o.action === "annotate" && o.artifactId === id) return false;
+        if (o.action === "link" && (o.artifactId === id || o.to === id)) return false;
+        return true;
+      });
+      for (const o of draft.plan.ops) if (o.action === "spawn" && o.inputs) o.inputs = o.inputs.filter((e) => e.to !== id);
+      break;
+    }
+    default:
+      throw new Error(`\u8349\u6848\u7F16\u8F91\u6682\u4E0D\u652F\u6301 ${op.action}\uFF08\u8349\u6848\u9636\u6BB5\u53EA\u652F\u6301 spawn / edit / link / unlink / cancel\uFF09`);
+  }
+}
+var spawnOps, candidatesOf;
+var init_draft_edit = __esm({
+  "../server/src/governance/draft-edit.ts"() {
+    "use strict";
+    init_src2();
+    spawnOps = (draft) => draft.plan.ops.filter((o) => o.action === "spawn" && !!o.id);
+    candidatesOf = (draft) => spawnOps(draft).map((o) => ({ id: o.id, type: o.type, ...o.title ? { title: o.title } : {} }));
+  }
+});
+
+// ../server/src/coordinator/identity.ts
+function isCoordinatorAgentName(name) {
+  return COORDINATOR_NAME_RE.test(name);
+}
+function isActiveCoordinatorAgent(actor) {
+  return actor.kind === "agent" && actor.status === "active" && isCoordinatorAgentName(actor.name);
+}
+async function listActiveCoordinatorAgents(registry2) {
+  if (!registry2) return [];
+  return (await registry2.listActors({ kind: "agent", status: "active" })).filter(isActiveCoordinatorAgent);
+}
+async function resolveCoordinatorRequirement(registry2) {
+  const candidates = await listActiveCoordinatorAgents(registry2);
+  const actor = candidates[0];
+  if (!actor) {
+    return {
+      ok: false,
+      code: "coordinator_missing",
+      message: "\u7CFB\u7EDF\u7F3A\u5C11\u534F\u8C03\u8005\u667A\u80FD\u4F53\u3002\u8BF7\u5148\u521B\u5EFA\u4E00\u4E2A\u540D\u79F0\u5305\u542B\u201C\u534F\u8C03\u8005\u201D\u6216\u201Ccoordinator\u201D\u7684\u6D3B\u8DC3\u667A\u80FD\u4F53\uFF0C\u5E76\u7ED1\u5B9A\u53EF\u7528\u8FD0\u884C\u65F6\u3002"
+    };
+  }
+  const binding = await registry2.getBinding(actor.id);
+  if (!binding || binding.status !== "active") {
+    return {
+      ok: false,
+      actor,
+      code: "coordinator_binding_missing",
+      message: `${actor.name}\uFF08${actor.id}\uFF09\u7F3A\u5C11 active runtime \u7ED1\u5B9A\u3002\u534F\u8C03\u8005\u65E0\u6CD5\u5904\u7406\u540E\u7EED gap / \u6B7B\u9501 / \u6539\u56FE\u6D41\u7A0B\u3002`
+    };
+  }
+  return { ok: true, actor, binding };
+}
+async function resolveCoordinator(registry2) {
+  const resolved = await resolveCoordinatorRequirement(registry2);
+  return resolved.ok && resolved.actor && resolved.binding ? { actor: resolved.actor, binding: resolved.binding } : null;
+}
+var LEGACY_COORDINATOR_ACTOR, COORDINATOR_NAME_RE;
+var init_identity = __esm({
+  "../server/src/coordinator/identity.ts"() {
+    "use strict";
+    LEGACY_COORDINATOR_ACTOR = "actor:agent:coordinator";
+    COORDINATOR_NAME_RE = /协调者|coordinator/i;
+  }
+});
+
 // ../server/src/domains/collab/planner.ts
 function ensureDefaultWorkorderTypes(schema) {
   const out = [...schema];
@@ -20576,6 +20756,46 @@ function upgradeDefaultFieldDefs(schema) {
   }
   return changed;
 }
+function isPlannerCoordinator(actor) {
+  return actor.kind === "agent" && (actor.roles.includes("coordinator") || isCoordinatorAgentName(actor.name));
+}
+async function plannerAvailableActors(registry2) {
+  if (!registry2) return [];
+  const active = await registry2.listActors({ status: "active" });
+  const out = [];
+  for (const actor of active) {
+    if (isPlannerCoordinator(actor)) continue;
+    const roles = actor.roles.filter((role) => role !== "coordinator");
+    if (roles.length === 0) continue;
+    if (actor.kind === "agent") {
+      const binding = await registry2.getBinding(actor.id);
+      if (!binding || binding.status !== "active") continue;
+    }
+    out.push({
+      id: actor.id,
+      name: actor.name,
+      roles,
+      kind: actor.kind
+    });
+  }
+  return out;
+}
+async function plannerArtifactTypes(schema, registry2) {
+  if (!registry2) {
+    return schema.filter((def) => def.name !== "brief").map((def) => ({
+      name: def.name,
+      ownerRole: def.ownerRole,
+      contentType: def.contentType
+    }));
+  }
+  const actors = await plannerAvailableActors(registry2);
+  const staffableRoles = new Set(actors.flatMap((actor) => actor.roles));
+  return schema.filter((def) => def.name !== "brief" && staffableRoles.has(def.ownerRole)).map((def) => ({
+    name: def.name,
+    ownerRole: def.ownerRole,
+    contentType: def.contentType
+  }));
+}
 function parseWorkorderSpec(body) {
   const first = body.split("\n", 1)[0] ?? "";
   if (!first.startsWith(WORKORDER_SPEC_PREFIX)) return null;
@@ -20602,6 +20822,8 @@ async function buildDynamicWorkorderPlan(input) {
   const primaryType = schemaByName.has(input.requestedType) && input.requestedType !== "brief" ? input.requestedType : "prd";
   const primaryId = input.requestedArtifactId && input.requestedType === primaryType ? input.requestedArtifactId : `artifact:${primaryType}:${slug4}`;
   const issues = [...input.agentIssues ?? []];
+  const enforceStaffing = Boolean(input.registry);
+  const staffableTypes = new Set((await plannerArtifactTypes(schema, input.registry)).map((def) => def.name));
   const roleCache = /* @__PURE__ */ new Map();
   const resolveRole = async (role, artifactType) => {
     const hit = roleCache.get(role);
@@ -20653,6 +20875,7 @@ async function buildDynamicWorkorderPlan(input) {
         continue;
       }
       const owner = await resolveRole(def.ownerRole, node.type);
+      if (enforceStaffing && (!owner.actor || !staffableTypes.has(node.type))) continue;
       const ownerActor = owner.actor ?? `pending:role:${def.ownerRole}`;
       availableNodes.push({
         type: node.type,
@@ -20674,6 +20897,7 @@ async function buildDynamicWorkorderPlan(input) {
       }
       const owner = await resolveRole(def.ownerRole, type);
       const ownerActor = owner.actor ?? (type === primaryType ? input.actor : `pending:role:${def.ownerRole}`);
+      if (enforceStaffing && !owner.actor && type !== primaryType) continue;
       const id = type === primaryType ? primaryId : `artifact:${type}:${slug4}`;
       availableNodes.push({ type, id, role: def.ownerRole, owner: ownerActor });
     }
@@ -20980,6 +21204,7 @@ var init_planner = __esm({
   "../server/src/domains/collab/planner.ts"() {
     "use strict";
     init_src2();
+    init_identity();
     DEFAULT_TYPES = [
       // brief 的 goal/acceptanceCriteria 现在是【自定义字段】（Phase 3，替代旧 OASIS_WORKORDER_SPEC 批注，铲 #1 死锁根）
       { name: "brief", contentType: "text", ownerRole: "pm", fieldDefs: [
@@ -21265,8 +21490,19 @@ async function runCommand(kernel, blobs, oplog, actor, command, args, ctx = {})
       if (createdViaArg !== void 0 && createdViaArg !== "seed" && createdViaArg !== "manual-spawn") {
         throw new Error(`createdVia \u4EC5\u63A5\u53D7 seed\uFF08\u53D1\u8D77\u5DE5\u5355\uFF09\u6216 manual-spawn\uFF1Bauto-trigger/prereq \u7531\u5185\u6838\u5185\u90E8\u8BBE\u7F6E`);
       }
-      const workspace = optStr(args, "workspace") ?? "ws:default";
+      let workspace = optStr(args, "workspace");
+      if (workspace === void 0) {
+        workspace = createdViaArg === "seed" ? `ws:wo-${(await import("node:crypto")).randomUUID().slice(0, 8)}` : "ws:default";
+      }
       const projectId = optStr(args, "project_id") ?? optStr(args, "projectId");
+      const schemaForSeed = (createdViaArg ?? "manual-spawn") === "seed" ? ctx.schema : void 0;
+      let coordinatorRequirement;
+      if (schemaForSeed) {
+        coordinatorRequirement = await resolveCoordinatorRequirement(ctx.registry);
+        if (!coordinatorRequirement.ok && args["allowMissingCoordinator"] !== true) {
+          throw new CoordinatorRequiredError(coordinatorRequirement);
+        }
+      }
       if (projectId !== void 0) {
         if (!ctx.projectState || !ctx.artifactState) {
           throw new Error("spawn \u5E26 project_id \u9700\u8981\u670D\u52A1\u7AEF\u6CE8\u5165\u9879\u76EE\u5B58\u50A8\u4E0E\u5DE5\u5355\u7ED1\u5B9A\u5B58\u50A8");
@@ -21275,7 +21511,7 @@ async function runCommand(kernel, blobs, oplog, actor, command, args, ctx = {})
         if (!project) throw new Error(`project not found: ${projectId}`);
         await ctx.artifactState.upsertWorkspaceBinding({ workOrderId: workspace, projectId });
       }
-      if ((createdViaArg ?? "manual-spawn") === "seed" && ctx.schema) {
+      if (schemaForSeed) {
         const title = optStr(args, "title") ?? optStr(args, "description") ?? workspace;
         const brief = optStr(args, "brief") ?? optStr(args, "body") ?? optStr(args, "description") ?? workspace;
         const goal = optStr(args, "goal");
@@ -21286,6 +21522,14 @@ async function runCommand(kernel, blobs, oplog, actor, command, args, ctx = {})
 \u9A8C\u6536\u6807\u51C6\uFF1A
 ${acceptanceCriteria.map((c) => `- ${c}`).join("\n")}` : brief;
         const agentIssues = [];
+        if (coordinatorRequirement && !coordinatorRequirement.ok) {
+          agentIssues.push({
+            code: "missing_coordinator",
+            severity: "warning",
+            role: "coordinator",
+            message: `${coordinatorRequirement.message} \u7528\u6237\u5DF2\u786E\u8BA4\u7EE7\u7EED\u521B\u5EFA\uFF1B\u540E\u7EED gap / \u6B7B\u9501 / \u6539\u56FE\u6D41\u7A0B\u53EF\u80FD\u65E0\u6CD5\u81EA\u52A8\u5904\u7406\u3002`
+          });
+        }
         let agentPlan = null;
         const inlinePlan = args["plan"];
         if (inlinePlan !== void 0 && inlinePlan !== null) {
@@ -21296,22 +21540,14 @@ ${acceptanceCriteria.map((c) => `- ${c}`).join("\n")}` : brief;
         }
         if (agentPlan === null && ctx.planWorkorderWithAgent) {
           try {
-            const availableActors = ctx.registry ? (await ctx.registry.listActors({ status: "active" })).map((a) => ({
-              id: a.id,
-              name: a.name,
-              roles: a.roles,
-              kind: a.kind
-            })) : [];
+            const availableActors = await plannerAvailableActors(ctx.registry);
+            const artifactTypes = await plannerArtifactTypes(schemaForSeed, ctx.registry);
             const attempt = await ctx.planWorkorderWithAgent({
               requestedType: type,
               workspace,
               title,
               brief: briefForPlanner,
-              artifactTypes: ctx.schema.map((def) => ({
-                name: def.name,
-                ownerRole: def.ownerRole,
-                contentType: def.contentType
-              })),
+              artifactTypes,
               availableActors
             });
             if (attempt) {
@@ -21342,7 +21578,7 @@ ${acceptanceCriteria.map((c) => `- ${c}`).join("\n")}` : brief;
           ...goal !== void 0 ? { goal } : {},
           ...acceptanceCriteria && acceptanceCriteria.length > 0 ? { acceptanceCriteria } : {},
           actor,
-          schema: ctx.schema,
+          schema: schemaForSeed,
           ...optStr(args, "id") !== void 0 ? { requestedArtifactId: optStr(args, "id") } : {},
           ...ctx.registry ? { registry: ctx.registry } : {},
           ...agentPlan ? { agentPlan } : {},
@@ -21739,8 +21975,9 @@ async function runView(kernel, oplog, blobs, name, artifactId, params) {
     case "ls":
       return [...model.artifacts.values()].map((a) => {
         const lifecycle = lifecycleOf(model, a.id);
-        const mark = lifecycle !== "active" ? lifecycle : pendingConcludeAttempt(model, a.id) ? "gate-pending" : blockedOf(model, a.id).blocked ? "blocked" : isConcluded(model, a.id) ? "concluded" : a.currentRev ? "active" : "embryo";
-        return { ...a, queue: queueOf(model, a.id).length, mark };
+        const queue = queueOf(model, a.id).length;
+        const mark = lifecycle !== "active" ? lifecycle : pendingConcludeAttempt(model, a.id) ? "gate-pending" : blockedOf(model, a.id).blocked ? "blocked" : isConcluded(model, a.id) ? "concluded" : a.currentRev || queue > 0 ? "active" : "embryo";
+        return { ...a, queue, mark };
       });
     case "show": {
       const id = need2();
@@ -21842,6 +22079,7 @@ async function runView(kernel, oplog, blobs, name, artifactId, params) {
 async function startOasisServer(opts) {
   const resolveActor = opts.resolveActor ?? defaultResolveActor;
   const stagingBuffers = /* @__PURE__ */ new Map();
+  const stagingWorkspace = /* @__PURE__ */ new Map();
   const resolveEngine = opts.resolveEngine ?? (async () => ({ kernel: opts.kernel, oplog: opts.oplog, blobs: opts.blobs, ...opts.registry ? { registry: opts.registry } : {} }));
   const domainRouter = new Router();
   for (const register of opts.domains ?? []) register(domainRouter);
@@ -21924,6 +22162,10 @@ async function startOasisServer(opts) {
           }));
           return;
         }
+        if (url.pathname === "/api/whoami" && req.method === "GET") {
+          res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ actor }));
+          return;
+        }
         const sessionKey = (req.headers.authorization ?? "").startsWith("Bearer ") ? req.headers.authorization.slice("Bearer ".length) : actor;
         const chunks = [];
         for await (const chunk of req) chunks.push(chunk);
@@ -21945,8 +22187,38 @@ async function startOasisServer(opts) {
               ...opts.workorderDrafts ? { workorderDrafts: opts.workorderDrafts } : {},
               ...opts.gitEnv ? { gitEnv: opts.gitEnv } : {}
             });
+            if (body.command === "spawn" && opts.chatSession) {
+              const workspace = body.args?.["workspace"];
+              if (workspace && workspace !== "ws:default") {
+                const chatSid = req.headers["x-chat-session-id"];
+                if (typeof chatSid === "string") {
+                  await opts.chatSession.linkWorkOrder(chatSid, workspace).catch((err) => {
+                    console.error(`[chat-session] Failed to link work order ${workspace} to session ${chatSid}:`, err);
+                  });
+                }
+              }
+            }
+            if (body.command === "spawn" && opts.workorderDrafts) {
+              const draftId = result?.data?.draftId;
+              const chatSid = req.headers["x-chat-session-id"];
+              if (draftId && typeof chatSid === "string") opts.workorderDrafts.tagSession(draftId, chatSid);
+            }
             res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify(result));
           } catch (err) {
+            if (err instanceof CoordinatorRequiredError) {
+              res.writeHead(err.status, { "content-type": "application/json" }).end(JSON.stringify({
+                error: {
+                  code: err.code,
+                  message: err.message,
+                  canContinueWithOverride: true,
+                  overrideField: "allowMissingCoordinator",
+                  overrideValue: true,
+                  reason: err.requirement.code,
+                  coordinatorActorId: err.requirement.actor?.id
+                }
+              }));
+              return;
+            }
             const status = err instanceof FrozenError ? 409 : 400;
             res.writeHead(status, { "content-type": "application/json" }).end(
               JSON.stringify({
@@ -21983,7 +22255,8 @@ async function startOasisServer(opts) {
         }
         if (url.pathname === "/api/workorder/draft" && req.method === "GET" && opts.workorderDrafts) {
           const workspace = url.searchParams.get("workspace");
-          const draft = workspace ? opts.workorderDrafts.forWorkspace(workspace) : void 0;
+          const session = url.searchParams.get("session");
+          const draft = workspace ? opts.workorderDrafts.forWorkspace(workspace) : session ? opts.workorderDrafts.forSession(session) : void 0;
           if (!draft) {
             res.writeHead(404, { "content-type": "application/json" }).end(JSON.stringify({ error: "no staged workorder draft" }));
             return;
@@ -22005,6 +22278,11 @@ async function startOasisServer(opts) {
             if (body.dispatch === false && brief?.workspace) {
               await opts.artifactState?.setWorkspaceDispatchHold(brief.workspace, true);
             }
+            if (opts.chatSession && body.chatSessionId && brief?.workspace && brief.workspace !== "ws:default") {
+              await opts.chatSession.linkWorkOrder(body.chatSessionId, brief.workspace).catch((err) => {
+                console.error(`[chat-session] Failed to link work order ${brief.workspace} to session ${body.chatSessionId}:`, err);
+              });
+            }
             res.writeHead(200, { "content-type": "application/json" }).end(
               JSON.stringify({ ...result, briefArtifactId: body.briefArtifactId, workspace: brief?.workspace ?? null })
             );
@@ -22089,11 +22367,29 @@ async function startOasisServer(opts) {
         }
         if (url.pathname === "/api/stage" && req.method === "POST") {
           try {
-            const { op } = JSON.parse(rawBody);
+            const { op, workspace } = JSON.parse(rawBody);
             if (!op || typeof op.action !== "string") throw new Error("\u7F3A\u5C11 op\uFF08{action,...}\uFF09");
+            if (opts.workorderDrafts) {
+              let ws = typeof workspace === "string" && workspace.trim() ? workspace.trim() : void 0;
+              if (!ws) {
+                const ref = op.artifactId;
+                if (typeof ref === "string" && ref.startsWith("artifact:"))
+                  ws = opts.workorderDrafts.list().find((d) => d.plan.ops.some((o) => o.action === "spawn" && o.id === ref))?.workspace;
+              }
+              const draft = ws ? opts.workorderDrafts.forWorkspace(ws) : void 0;
+              if (draft) {
+                editDraftPlan(draft, op);
+                draft.at = (/* @__PURE__ */ new Date()).toISOString();
+                res.writeHead(200, { "content-type": "application/json" }).end(
+                  JSON.stringify({ draft: true, workspace: draft.workspace, nodes: draft.plan.ops.filter((o) => o.action === "spawn").length, staged: op })
+                );
+                return;
+              }
+            }
             const buf = stagingBuffers.get(sessionKey) ?? [];
             buf.push(op);
             stagingBuffers.set(sessionKey, buf);
+            if (typeof workspace === "string" && workspace.trim()) stagingWorkspace.set(sessionKey, workspace.trim());
             const cascade = op.action === "seal" && op.reason === "cancelled" ? engine.kernel.cancelCascadeEdges(op.artifactId) : void 0;
             res.writeHead(200, { "content-type": "application/json" }).end(
               JSON.stringify({ count: buf.length, staged: op, ...cascade && cascade.length > 0 ? { cascade } : {} })
@@ -22107,10 +22403,11 @@ async function startOasisServer(opts) {
         }
         if (url.pathname === "/api/stage" && req.method === "GET") {
           const ops = stagingBuffers.get(sessionKey) ?? [];
+          const ws = stagingWorkspace.get(sessionKey);
           let preview2 = null;
           if (ops.length > 0) {
             try {
-              preview2 = await engine.kernel.previewIntervention({ reason: "(staged)", ops });
+              preview2 = await engine.kernel.previewIntervention({ reason: "(staged)", ops, ...ws ? { workspace: ws } : {} });
             } catch (err) {
               preview2 = { error: err instanceof Error ? err.message : String(err) };
             }
@@ -22120,6 +22417,7 @@ async function startOasisServer(opts) {
         }
         if (url.pathname === "/api/stage" && req.method === "DELETE") {
           stagingBuffers.delete(sessionKey);
+          stagingWorkspace.delete(sessionKey);
           res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ cleared: true }));
           return;
         }
@@ -22131,7 +22429,8 @@ async function startOasisServer(opts) {
               return;
             }
             const { reason } = JSON.parse(rawBody || "{}");
-            const plan = { reason: reason?.trim() || "(\u534F\u8C03\u8005 staged \u6539\u56FE)", ops };
+            const ws = stagingWorkspace.get(sessionKey);
+            const plan = { reason: reason?.trim() || "(\u534F\u8C03\u8005 staged \u6539\u56FE)", ops, ...ws ? { workspace: ws } : {} };
             const preview2 = await engine.kernel.previewIntervention(plan);
             if (!preview2.endState.ok) {
               throw new Error(`\u7EC8\u6001\u6821\u9A8C\u4E0D\u8FC7\uFF08\u673A\u68B0\u786C\u62E6\uFF09\uFF1A${preview2.endState.violations.join("\uFF1B")}`);
@@ -22139,6 +22438,7 @@ async function startOasisServer(opts) {
             if (preview2.changeClass === "B") {
               const result = await engine.kernel.applyIntervention(plan, preview2.baseSeqs, actor);
               stagingBuffers.delete(sessionKey);
+              stagingWorkspace.delete(sessionKey);
               res.writeHead(200, { "content-type": "application/json" }).end(
                 JSON.stringify({ outcome: "applied", applied: result.applied, interventionId: result.interventionId })
               );
@@ -22154,6 +22454,7 @@ async function startOasisServer(opts) {
                 downstreamClosure: preview2.blastRadius.downstreamClosure
               });
               stagingBuffers.delete(sessionKey);
+              stagingWorkspace.delete(sessionKey);
               res.writeHead(200, { "content-type": "application/json" }).end(
                 JSON.stringify({ outcome: "drafted", draftId: draft.id, changeClass: draft.changeClass, nonMonotonicOps: draft.nonMonotonicOps })
               );
@@ -22249,10 +22550,33 @@ async function startOasisServer(opts) {
           }
           return;
         }
+        if (url.pathname === "/api/chat/attachments" && req.method === "POST" && opts.uploadChatAttachment) {
+          try {
+            const body = JSON.parse(rawBody);
+            if (typeof body.contentBase64 !== "string" || !body.contentBase64) throw new Error("\u7F3A\u5C11 contentBase64");
+            const out = await opts.uploadChatAttachment({
+              contentBase64: body.contentBase64,
+              ...typeof body.contentType === "string" ? { contentType: body.contentType } : {},
+              ...typeof body.name === "string" ? { name: body.name } : {}
+            });
+            res.writeHead(201, { "content-type": "application/json" });
+            res.end(JSON.stringify(out));
+          } catch (err) {
+            res.writeHead(400, { "content-type": "application/json" });
+            res.end(JSON.stringify({ error: { code: "ATTACHMENT_UPLOAD_FAILED", message: err instanceof Error ? err.message : String(err) } }));
+          }
+          return;
+        }
         if (url.pathname === "/api/chat" && req.method === "POST") {
           try {
             const body = JSON.parse(rawBody);
             if (!body.message) throw new Error("\u7F3A\u5C11 message");
+            const attachments = Array.isArray(body.attachments) ? body.attachments.filter((a) => typeof a?.name === "string" && (typeof a?.text === "string" || typeof a?.blobRef === "string")).map((a) => ({
+              name: a.name,
+              ...typeof a.text === "string" ? { text: a.text } : {},
+              ...typeof a.blobRef === "string" ? { blobRef: a.blobRef } : {},
+              ...typeof a.contentType === "string" ? { contentType: a.contentType } : {}
+            })) : [];
             const typedParts = wantsChatParts(req);
             if (opts.dispatchChat) {
               if (!body.actorId) {
@@ -22261,7 +22585,9 @@ async function startOasisServer(opts) {
               const session = await opts.dispatchChat({
                 actorId: body.actorId,
                 message: body.message,
-                ...body.sessionId ? { sessionId: body.sessionId } : {}
+                ...body.sessionId ? { sessionId: body.sessionId } : {},
+                ...body.chatSessionId ? { chatSessionId: body.chatSessionId } : {},
+                ...attachments.length ? { attachments } : {}
               });
               let finished = false;
               res.on("close", () => {
@@ -22277,8 +22603,9 @@ async function startOasisServer(opts) {
                 res.writeHead(200, {
                   "content-type": "application/x-ndjson; charset=utf-8",
                   "transfer-encoding": "chunked",
-                  "access-control-expose-headers": "X-Session-Id",
-                  "x-session-id": session.id
+                  "access-control-expose-headers": "X-Session-Id, X-Run-Id",
+                  "x-session-id": session.id,
+                  ...session.runId ? { "x-run-id": session.runId } : {}
                 });
                 let sawTextOutput = false;
                 session.onOutput((chunk) => {
@@ -22382,7 +22709,7 @@ async function startOasisServer(opts) {
             ];
             const child = spawn6(opts.claudeBin ?? "claude", args, {
               ...spawnCwd ? { cwd: spawnCwd } : {},
-              env: { ...process.env, ...env },
+              env: { ...process.env, ...env, ...body.chatSessionId ? { OASIS_CHAT_SESSION_ID: body.chatSessionId } : {} },
               stdio: ["ignore", "pipe", "pipe"]
             });
             if (typedParts) {
@@ -22663,7 +22990,7 @@ async function startOasisServer(opts) {
     })
   };
 }
-var http, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, GOVERNANCE_COMMANDS, isAgent;
+var http, CoordinatorRequiredError, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, GOVERNANCE_COMMANDS, isAgent;
 var init_server3 = __esm({
   "../server/src/server.ts"() {
     "use strict";
@@ -22675,7 +23002,17 @@ var init_server3 = __esm({
     init_router();
     init_drafts();
     init_workorder_drafts();
+    init_draft_edit();
     init_planner();
+    init_identity();
+    CoordinatorRequiredError = class extends Error {
+      constructor(requirement) {
+        super(requirement.message ?? "\u7CFB\u7EDF\u7F3A\u5C11\u534F\u8C03\u8005\u667A\u80FD\u4F53\u3002");
+        this.requirement = requirement;
+      }
+      status = 409;
+      code = "COORDINATOR_REQUIRED";
+    };
     defaultResolveActor = (token) => token.startsWith("token:") ? token.slice("token:".length) : null;
     enc = (s2) => new TextEncoder().encode(s2);
     CHAT_OUTPUT_LIMIT = 16e3;
@@ -22687,29 +23024,53 @@ var init_server3 = __esm({
 // ../server/src/tokens.ts
 function createTokenIssuer() {
   const table = /* @__PURE__ */ new Map();
+  const prune = () => {
+    const now = Date.now();
+    for (const [token, entry] of table) {
+      if (entry.expiresAt !== void 0 && entry.expiresAt <= now) table.delete(token);
+    }
+  };
   return {
-    issue(actor) {
+    issue(actor, opts = {}) {
+      prune();
       const token = `oat_${(0, import_node_crypto3.randomBytes)(24).toString("base64url")}`;
-      table.set(token, actor);
+      const issuedAt = Date.now();
+      table.set(token, {
+        actor,
+        issuedAt,
+        ...opts.ttlMs !== void 0 ? { expiresAt: issuedAt + opts.ttlMs } : {},
+        ...opts.sessionId !== void 0 ? { sessionId: opts.sessionId } : {},
+        ...opts.artifactId !== void 0 ? { artifactId: opts.artifactId } : {},
+        ...opts.action !== void 0 ? { action: opts.action } : {},
+        ...opts.nodeId !== void 0 ? { nodeId: opts.nodeId } : {},
+        ...opts.runtimeKind !== void 0 ? { runtimeKind: opts.runtimeKind } : {},
+        ...opts.scopes !== void 0 ? { scopes: opts.scopes } : {}
+      });
       return token;
     },
     revoke(token) {
       table.delete(token);
     },
     resolve(token) {
-      return table.get(token) ?? null;
+      const entry = table.get(token);
+      if (!entry) return null;
+      if (entry.expiresAt !== void 0 && entry.expiresAt <= Date.now()) {
+        table.delete(token);
+        return null;
+      }
+      return entry.actor;
     }
   };
 }
 function createNodeTokenStore(file) {
   const read = () => {
     try {
-      return JSON.parse(fs.readFileSync(file, "utf8"));
+      return JSON.parse(fs2.readFileSync(file, "utf8"));
     } catch {
       return {};
     }
   };
-  const write = (table) => fs.writeFileSync(file, JSON.stringify(table, null, 2), { mode: 384 });
+  const write = (table) => fs2.writeFileSync(file, JSON.stringify(table, null, 2), { mode: 384 });
   return {
     issue(nodeId) {
       const table = read();
@@ -22735,14 +23096,14 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   const read = () => {
     if (!file) return table;
     try {
-      return new Map(Object.entries(JSON.parse(fs.readFileSync(file, "utf8"))));
+      return new Map(Object.entries(JSON.parse(fs2.readFileSync(file, "utf8"))));
     } catch {
       return /* @__PURE__ */ new Map();
     }
   };
   const write = (m2) => {
     if (!file) return;
-    fs.writeFileSync(file, JSON.stringify(Object.fromEntries(m2), null, 2), { mode: 384 });
+    fs2.writeFileSync(file, JSON.stringify(Object.fromEntries(m2), null, 2), { mode: 384 });
   };
   const table = /* @__PURE__ */ new Map();
   const prune = () => {
@@ -22785,12 +23146,12 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
     }
   };
 }
-var import_node_crypto3, fs;
+var import_node_crypto3, fs2;
 var init_tokens = __esm({
   "../server/src/tokens.ts"() {
     "use strict";
     import_node_crypto3 = require("node:crypto");
-    fs = __toESM(require("node:fs"), 1);
+    fs2 = __toESM(require("node:fs"), 1);
   }
 });
 
@@ -23904,17 +24265,25 @@ function nodeInfo(model, a) {
   const lifecycle = lifecycleOf(model, a.id);
   const sealed = lifecycle !== "active";
   const concluded = isConcluded(model, a.id);
-  const mark = sealed ? lifecycle : pendingConcludeAttempt(model, a.id) ? "gate-pending" : blockedOf(model, a.id).blocked ? "blocked" : concluded ? "concluded" : a.currentRev ? "active" : "embryo";
-  const hasWorking = revisionsOf(model, a.id).some((r) => r.state === "working");
-  return { mark, queueLen: queueOf(model, a.id).length, concluded, sealed, hasWorking };
+  const queueLen = queueOf(model, a.id).length;
+  const mark = sealed ? lifecycle : pendingConcludeAttempt(model, a.id) ? "gate-pending" : blockedOf(model, a.id).blocked ? "blocked" : concluded ? "concluded" : (
+    // embryo 只判"还没动工"：无定稿版**且**队列里也没有待审版。智能体已交首版排队待审
+    // （queueLen>0）即已产出，按 active 走，由 deriveNodeStage 落到 review，别误判成 embryo。
+    a.currentRev || queueLen > 0 ? "active" : "embryo"
+  );
+  const revisions = revisionsOf(model, a.id);
+  const hasWorking = revisions.some((r) => r.state === "working");
+  const producedParts = new Set(revisions.filter((r) => r.part !== void 0 && r.state !== "rejected").map((r) => r.part));
+  const hasUnproducedParts = (a.parts ?? []).some((p2) => !producedParts.has(p2.name));
+  return { mark, queueLen, concluded, sealed, hasWorking, hasUnproducedParts };
 }
 function deriveStage(members) {
   if (members.length > 0 && members.every((m2) => m2.sealed)) return "sealed";
   const live = members.filter((m2) => !m2.sealed);
   if (live.length > 0 && live.every((m2) => m2.concluded)) return "concluded";
-  const reviewing = live.some((m2) => m2.mark === "gate-pending" || m2.mark === "active" && m2.queueLen > 0);
+  const reviewing = live.some((m2) => m2.mark === "gate-pending" || m2.mark === "active" && m2.queueLen > 0 && !m2.hasUnproducedParts);
   if (reviewing) return "review";
-  const progressing = live.some((m2) => m2.mark === "active" || m2.mark === "embryo");
+  const progressing = live.some((m2) => m2.mark === "active" || m2.mark === "embryo" || m2.hasUnproducedParts);
   const blocked = live.some((m2) => m2.mark === "blocked");
   if (blocked && !progressing) return "blocked";
   return "executing";
@@ -23931,7 +24300,7 @@ function deriveNodeStage(info) {
     case "embryo":
       return "embryo";
     default:
-      if (info.hasWorking) return "editing";
+      if (info.hasWorking || info.hasUnproducedParts) return "editing";
       if (info.queueLen > 0) return "review";
       return "merged";
   }
@@ -23969,6 +24338,8 @@ function buildWorkorderSummaries(model, resolveActor, resolveProject, dispatchPa
     const lastOps = arts.map((a) => model.lastOpAt.get(a.id)).filter((t) => Boolean(t)).sort();
     const participantIds = [...new Set(arts.map((a) => a.owner))];
     const woTitle = seed.title ?? seed.description ?? workspace;
+    const stage = deriveStage(members);
+    const dispatchPaused = dispatchPausedOf?.(workspace) ?? false;
     out.push({
       id: workspace,
       title: woTitle,
@@ -23976,7 +24347,7 @@ function buildWorkorderSummaries(model, resolveActor, resolveProject, dispatchPa
       ...seed.description && seed.description !== woTitle ? { description: seed.description } : {},
       // 一句话目标：优先取结构化 spec.goal；缺省时前端回退 description 首段（投影不替前端做回退，只给真值）
       ...spec?.goal ? { goal: spec.goal } : {},
-      stage: deriveStage(members),
+      stage,
       owner: ref(seed.owner),
       participants: participantIds.map(ref),
       artifactCount: arts.length,
@@ -23984,7 +24355,7 @@ function buildWorkorderSummaries(model, resolveActor, resolveProject, dispatchPa
       updatedAt: lastOps[lastOps.length - 1] ?? "",
       projectId: resolveProject?.(workspace) ?? null,
       planning: planningStatusOf(model, arts),
-      ...dispatchPausedOf?.(workspace) ? { dispatchPaused: true } : {}
+      ...dispatchPaused ? { dispatchPaused: true } : {}
     });
   }
   return out.sort((a, b2) => a.updatedAt < b2.updatedAt ? 1 : a.updatedAt > b2.updatedAt ? -1 : 0);
@@ -24858,9 +25229,9 @@ var init_service = __esm({
           reason: input.revision.summary ?? input.revision.version
         });
         await this.syncProjection();
-        const record3 = await this.artifacts.getRevision(kernelRevision.id);
-        if (!record3) throw new Error(`revision projection missing after register: ${kernelRevision.id}`);
-        return record3;
+        const record4 = await this.artifacts.getRevision(kernelRevision.id);
+        if (!record4) throw new Error(`revision projection missing after register: ${kernelRevision.id}`);
+        return record4;
       }
       async approveArtifactRevision(input) {
         if (input.actorKind !== "human") throw namedError("AgentReviewForbidden", "agents cannot approve artifact revisions");
@@ -24955,9 +25326,9 @@ var init_service = __esm({
           ...input.revisionId ? { revisionId: input.revisionId } : {}
         });
         await this.syncProjection();
-        const record3 = await this.artifacts.getAnnotation(kernelAnnotation.id);
-        if (!record3) throw new Error(`annotation projection missing after create: ${kernelAnnotation.id}`);
-        return record3;
+        const record4 = await this.artifacts.getAnnotation(kernelAnnotation.id);
+        if (!record4) throw new Error(`annotation projection missing after create: ${kernelAnnotation.id}`);
+        return record4;
       }
       async resolveArtifactAnnotation(input) {
         const artifact = await this.artifacts.getArtifact(input.artifactId);
@@ -24973,9 +25344,9 @@ var init_service = __esm({
           ...input.comment?.trim() ? { note: input.comment.trim() } : {}
         });
         await this.syncProjection();
-        const record3 = await this.artifacts.getAnnotation(input.annotationId);
-        if (!record3) throw new Error(`annotation projection missing after resolve: ${input.annotationId}`);
-        return record3;
+        const record4 = await this.artifacts.getAnnotation(input.annotationId);
+        if (!record4) throw new Error(`annotation projection missing after resolve: ${input.annotationId}`);
+        return record4;
       }
       async registerNodeOutput(input) {
         await this.assertProjectExecutable(input.projectId);
@@ -25204,12 +25575,12 @@ var init_service = __esm({
 });
 
 // ../server/src/dev-store.ts
-var import_node_crypto4, fs2, path, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRegistryStore, FileProjectStateStore, FileProjectDocumentStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore;
+var import_node_crypto4, fs3, path, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRegistryStore, FileProjectStateStore, FileProjectDocumentStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
     import_node_crypto4 = require("node:crypto");
-    fs2 = __toESM(require("node:fs"), 1);
+    fs3 = __toESM(require("node:fs"), 1);
     path = __toESM(require("node:path"), 1);
     init_src();
     init_src3();
@@ -25222,8 +25593,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const memory = new MemoryOplogStore();
-        if (fs2.existsSync(file)) {
-          for (const line of fs2.readFileSync(file, "utf8").split("\n")) {
+        if (fs3.existsSync(file)) {
+          for (const line of fs3.readFileSync(file, "utf8").split("\n")) {
             if (!line.trim()) continue;
             const stored = JSON.parse(line);
             const { artifactId, seq, ...op } = stored;
@@ -25231,15 +25602,15 @@ var init_dev_store = __esm({
             if (assigned !== seq) throw new Error(`corrupt ndjson log: seq mismatch at ${line}`);
           }
         } else {
-          fs2.mkdirSync(path.dirname(file), { recursive: true });
-          fs2.writeFileSync(file, "");
+          fs3.mkdirSync(path.dirname(file), { recursive: true });
+          fs3.writeFileSync(file, "");
         }
         return new _NdjsonOplogStore(file, memory);
       }
       async append(artifactId, op, expectedSeq) {
         const seq = await this.memory.append(artifactId, op, expectedSeq);
         const stored = { ...op, artifactId, seq };
-        fs2.appendFileSync(this.file, JSON.stringify(stored) + "\n");
+        fs3.appendFileSync(this.file, JSON.stringify(stored) + "\n");
         return seq;
       }
       read(artifactId, fromSeq) {
@@ -25255,7 +25626,7 @@ var init_dev_store = __esm({
     DirBlobStore = class {
       constructor(dir) {
         this.dir = dir;
-        fs2.mkdirSync(dir, { recursive: true });
+        fs3.mkdirSync(dir, { recursive: true });
       }
       fileOf(hash) {
         return path.join(this.dir, hash);
@@ -25263,31 +25634,31 @@ var init_dev_store = __esm({
       async put(bytes) {
         const hash = (0, import_node_crypto4.createHash)("sha256").update(bytes).digest("hex");
         const file = this.fileOf(hash);
-        if (!fs2.existsSync(file)) fs2.writeFileSync(file, bytes);
+        if (!fs3.existsSync(file)) fs3.writeFileSync(file, bytes);
         return hash;
       }
       async meta(hash) {
         const file = this.fileOf(hash);
-        if (!fs2.existsSync(file)) return null;
-        const size = fs2.statSync(file).size;
-        const fd = fs2.openSync(file, "r");
+        if (!fs3.existsSync(file)) return null;
+        const size = fs3.statSync(file).size;
+        const fd = fs3.openSync(file, "r");
         const head = Buffer.alloc(16);
-        fs2.readSync(fd, head, 0, 16, 0);
-        fs2.closeSync(fd);
+        fs3.readSync(fd, head, 0, 16, 0);
+        fs3.closeSync(fd);
         const contentType = sniffContentType(new Uint8Array(head));
         return { size, ...contentType ? { contentType } : {} };
       }
       async get(hash) {
         const file = this.fileOf(hash);
-        if (!fs2.existsSync(file)) throw new BlobNotFoundError(hash);
-        return new Uint8Array(fs2.readFileSync(file));
+        if (!fs3.existsSync(file)) throw new BlobNotFoundError(hash);
+        return new Uint8Array(fs3.readFileSync(file));
       }
       async has(hash) {
-        return fs2.existsSync(this.fileOf(hash));
+        return fs3.existsSync(this.fileOf(hash));
       }
       async sweep(reachable) {
-        for (const name of fs2.readdirSync(this.dir)) {
-          if (!reachable.has(name)) fs2.unlinkSync(this.fileOf(name));
+        for (const name of fs3.readdirSync(this.dir)) {
+          if (!reachable.has(name)) fs3.unlinkSync(this.fileOf(name));
         }
       }
     };
@@ -25313,7 +25684,7 @@ var init_dev_store = __esm({
         this.file = file;
       }
       static async open(file) {
-        const seed = fs2.existsSync(file) ? JSON.parse(fs2.readFileSync(file, "utf8")) : [];
+        const seed = fs3.existsSync(file) ? JSON.parse(fs3.readFileSync(file, "utf8")) : [];
         return new _FileTypeRegistryStore(file, seed);
       }
       async put(def) {
@@ -25326,8 +25697,8 @@ var init_dev_store = __esm({
       }
       async save() {
         const tmp = `${this.file}.tmp`;
-        fs2.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
-        fs2.renameSync(tmp, this.file);
+        fs3.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
+        fs3.renameSync(tmp, this.file);
       }
     };
     FileRegistryStore = class _FileRegistryStore extends MemoryRegistryStore {
@@ -25345,8 +25716,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileRegistryStore(file);
-        if (fs2.existsSync(file)) {
-          const snap = JSON.parse(fs2.readFileSync(file, "utf8"));
+        if (fs3.existsSync(file)) {
+          const snap = JSON.parse(fs3.readFileSync(file, "utf8"));
           for (const a of snap.actors) await MemoryRegistryStore.prototype.upsertActor.call(store, a);
           for (const c of snap.configs) await MemoryRegistryStore.prototype.appendConfig.call(store, c);
           for (const t of snap.teams) await MemoryRegistryStore.prototype.upsertTeam.call(store, t);
@@ -25383,7 +25754,7 @@ var init_dev_store = __esm({
           installedSkills,
           skillFiles: skillFilesEntries
         };
-        fs2.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs3.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
     FileProjectStateStore = class _FileProjectStateStore extends MemoryProjectStateStore {
@@ -25393,8 +25764,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileProjectStateStore(file);
-        if (fs2.existsSync(file)) {
-          const snap = JSON.parse(fs2.readFileSync(file, "utf8"));
+        if (fs3.existsSync(file)) {
+          const snap = JSON.parse(fs3.readFileSync(file, "utf8"));
           for (const project of snap.projects ?? []) await MemoryProjectStateStore.prototype.upsertProject.call(store, project);
           const membersByProject = /* @__PURE__ */ new Map();
           for (const member of snap.members ?? []) {
@@ -25406,8 +25777,8 @@ var init_dev_store = __esm({
             await MemoryProjectStateStore.prototype.replaceProjectMembers.call(store, projectId, members);
           }
         } else {
-          fs2.mkdirSync(path.dirname(file), { recursive: true });
-          fs2.writeFileSync(file, JSON.stringify({ projects: [], members: [] }, null, 2));
+          fs3.mkdirSync(path.dirname(file), { recursive: true });
+          fs3.writeFileSync(file, JSON.stringify({ projects: [], members: [] }, null, 2));
         }
         return store;
       }
@@ -25426,7 +25797,7 @@ var init_dev_store = __esm({
       async save() {
         const projects = await this.listProjects();
         const members = (await Promise.all(projects.map((project) => this.listProjectMembers(project.id)))).flat();
-        fs2.writeFileSync(this.file, JSON.stringify({ projects, members }, null, 2));
+        fs3.writeFileSync(this.file, JSON.stringify({ projects, members }, null, 2));
       }
     };
     FileProjectDocumentStore = class _FileProjectDocumentStore extends MemoryProjectDocumentStore {
@@ -25436,8 +25807,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileProjectDocumentStore(file);
-        if (fs2.existsSync(file)) {
-          const snap = JSON.parse(fs2.readFileSync(file, "utf8"));
+        if (fs3.existsSync(file)) {
+          const snap = JSON.parse(fs3.readFileSync(file, "utf8"));
           for (const [projectId, space] of Object.entries(snap.spaces ?? {})) {
             store.spaces.set(projectId, {
               rootRef: space.rootRef,
@@ -25451,8 +25822,8 @@ var init_dev_store = __esm({
             });
           }
         } else {
-          fs2.mkdirSync(path.dirname(file), { recursive: true });
-          fs2.writeFileSync(file, JSON.stringify({ spaces: {} }, null, 2));
+          fs3.mkdirSync(path.dirname(file), { recursive: true });
+          fs3.writeFileSync(file, JSON.stringify({ spaces: {} }, null, 2));
         }
         return store;
       }
@@ -25485,7 +25856,7 @@ var init_dev_store = __esm({
             runStates: [...space.runStates.values()]
           };
         }
-        fs2.writeFileSync(this.file, JSON.stringify({ spaces }, null, 2));
+        fs3.writeFileSync(this.file, JSON.stringify({ spaces }, null, 2));
       }
     };
     FileArtifactStateStore = class _FileArtifactStateStore extends MemoryArtifactStateStore {
@@ -25495,8 +25866,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileArtifactStateStore(file);
-        if (fs2.existsSync(file)) {
-          const snap = JSON.parse(fs2.readFileSync(file, "utf8"));
+        if (fs3.existsSync(file)) {
+          const snap = JSON.parse(fs3.readFileSync(file, "utf8"));
           for (const artifact of snap.artifacts ?? []) await MemoryArtifactStateStore.prototype.upsertArtifact.call(store, artifact);
           for (const revision of snap.revisions ?? []) await MemoryArtifactStateStore.prototype.upsertRevision.call(store, revision);
           for (const event of snap.events ?? []) await MemoryArtifactStateStore.prototype.appendEvent.call(store, event);
@@ -25505,8 +25876,8 @@ var init_dev_store = __esm({
           for (const binding of snap.workspaceBindings ?? []) await MemoryArtifactStateStore.prototype.upsertWorkspaceBinding.call(store, binding);
           for (const ws of snap.workspaceDispatchHeld ?? []) await MemoryArtifactStateStore.prototype.setWorkspaceDispatchHold.call(store, ws, true);
         } else {
-          fs2.mkdirSync(path.dirname(file), { recursive: true });
-          fs2.writeFileSync(file, JSON.stringify({ artifacts: [], revisions: [], events: [], annotations: [], nodeOutputs: [], workspaceBindings: [], workspaceDispatchHeld: [] }, null, 2));
+          fs3.mkdirSync(path.dirname(file), { recursive: true });
+          fs3.writeFileSync(file, JSON.stringify({ artifacts: [], revisions: [], events: [], annotations: [], nodeOutputs: [], workspaceBindings: [], workspaceDispatchHeld: [] }, null, 2));
         }
         return store;
       }
@@ -25539,7 +25910,7 @@ var init_dev_store = __esm({
         await this.save();
       }
       async save() {
-        fs2.writeFileSync(this.file, JSON.stringify(await this.listAll(), null, 2));
+        fs3.writeFileSync(this.file, JSON.stringify(await this.listAll(), null, 2));
       }
     };
     FileTraceStore = class _FileTraceStore extends MemoryTraceStore {
@@ -25566,20 +25937,20 @@ var init_dev_store = __esm({
         return path.join(this.eventsDir, `${encodeURIComponent(runId)}.ndjson`);
       }
       appendLine(file, obj) {
-        fs2.appendFileSync(file, JSON.stringify(obj) + "\n");
+        fs3.appendFileSync(file, JSON.stringify(obj) + "\n");
       }
       static replay(file, fn) {
-        if (!fs2.existsSync(file)) return;
-        for (const line of fs2.readFileSync(file, "utf8").split("\n")) {
+        if (!fs3.existsSync(file)) return;
+        for (const line of fs3.readFileSync(file, "utf8").split("\n")) {
           if (!line.trim()) continue;
           fn(JSON.parse(line));
         }
       }
       static async open(dir) {
         const store = new _FileTraceStore(dir);
-        fs2.mkdirSync(store.eventsDir, { recursive: true });
+        fs3.mkdirSync(store.eventsDir, { recursive: true });
         _FileTraceStore.replay(store.runsFile, (r) => store.restoreRun(r));
-        for (const name of fs2.readdirSync(store.eventsDir)) {
+        for (const name of fs3.readdirSync(store.eventsDir)) {
           _FileTraceStore.replay(path.join(store.eventsDir, name), (e) => store.restoreEvent(e));
         }
         _FileTraceStore.replay(store.toolCallsFile, (c) => store.restoreToolCall(c));
@@ -25624,6 +25995,7 @@ var init_dev_store = __esm({
     MemoryChatSessionStore = class {
       sessions = /* @__PURE__ */ new Map();
       messages = /* @__PURE__ */ new Map();
+      sessionWorkOrders = /* @__PURE__ */ new Map();
       async createSession(s2) {
         this.sessions.set(s2.id, s2);
       }
@@ -25640,6 +26012,7 @@ var init_dev_store = __esm({
       async deleteSession(id) {
         this.sessions.delete(id);
         this.messages.delete(id);
+        this.sessionWorkOrders.delete(id);
       }
       async appendMessage(m2) {
         const list = this.messages.get(m2.sessionId) ?? [];
@@ -25650,16 +26023,24 @@ var init_dev_store = __esm({
         const list = (this.messages.get(sessionId) ?? []).sort((a, b2) => a.seq - b2.seq);
         return limit ? list.slice(-limit) : list;
       }
+      async linkWorkOrder(sessionId, workOrderId) {
+        const set = this.sessionWorkOrders.get(sessionId) ?? /* @__PURE__ */ new Set();
+        set.add(workOrderId);
+        this.sessionWorkOrders.set(sessionId, set);
+      }
+      async listWorkOrdersForSession(sessionId) {
+        return [...this.sessionWorkOrders.get(sessionId) ?? []];
+      }
     };
   }
 });
 
 // ../server/src/control-plane-file-store.ts
-var fs3, path2, MUTATORS2, FileControlPlaneStore;
+var fs4, path2, MUTATORS2, FileControlPlaneStore;
 var init_control_plane_file_store = __esm({
   "../server/src/control-plane-file-store.ts"() {
     "use strict";
-    fs3 = __toESM(require("node:fs"), 1);
+    fs4 = __toESM(require("node:fs"), 1);
     path2 = __toESM(require("node:path"), 1);
     init_src3();
     MUTATORS2 = [
@@ -25688,15 +26069,15 @@ var init_control_plane_file_store = __esm({
       }
       static async open(file) {
         const store = new _FileControlPlaneStore(file);
-        if (fs3.existsSync(file)) {
-          const snap = JSON.parse(fs3.readFileSync(file, "utf8"));
+        if (fs4.existsSync(file)) {
+          const snap = JSON.parse(fs4.readFileSync(file, "utf8"));
           for (const c of snap.companies ?? []) await MemoryControlPlaneStore.prototype.createCompany.call(store, c);
           for (const m2 of snap.members ?? []) await MemoryControlPlaneStore.prototype.upsertMember.call(store, m2);
           for (const inv of snap.invitations ?? []) await MemoryControlPlaneStore.prototype.createInvitation.call(store, inv);
           for (const a of snap.accounts ?? []) await MemoryControlPlaneStore.prototype.upsertAccount.call(store, a);
           for (const e of snap.accountSecrets ?? []) store.accountSecrets.set(e.accountId, { ...e.secret });
         } else {
-          fs3.mkdirSync(path2.dirname(file), { recursive: true });
+          fs4.mkdirSync(path2.dirname(file), { recursive: true });
         }
         return store;
       }
@@ -25717,7 +26098,7 @@ var init_control_plane_file_store = __esm({
           accounts,
           accountSecrets
         };
-        fs3.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs4.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
   }
@@ -25991,7 +26372,7 @@ var init_liveness = __esm({
 
 // ../server/src/file-engine.ts
 async function openFileEngine(dir, seed = {}) {
-  fs4.mkdirSync(dir, { recursive: true });
+  fs5.mkdirSync(dir, { recursive: true });
   const oplog = await NdjsonOplogStore.open(path3.join(dir, "oplog.ndjson"));
   const blobs = new DirBlobStore(path3.join(dir, "blobs"));
   const assets = new DirBlobStore(path3.join(dir, "assets"));
@@ -26012,11 +26393,11 @@ async function openFileEngine(dir, seed = {}) {
 function companyEngineDirName(companyId) {
   return companyId.replace(/[^A-Za-z0-9._-]/g, "_");
 }
-var fs4, path3;
+var fs5, path3;
 var init_file_engine = __esm({
   "../server/src/file-engine.ts"() {
     "use strict";
-    fs4 = __toESM(require("node:fs"), 1);
+    fs5 = __toESM(require("node:fs"), 1);
     path3 = __toESM(require("node:path"), 1);
     init_src2();
     init_dev_store();
@@ -30069,6 +30450,7 @@ var init_service2 = __esm({
     "use strict";
     import_node_crypto5 = require("node:crypto");
     init_skill_fetcher();
+    init_identity();
     REDACTED_MARKER = "[REDACTED]";
     ActorsService = class {
       constructor(opts) {
@@ -30084,11 +30466,19 @@ var init_service2 = __esm({
       async upsertActor(a, by) {
         const existing = await this.opts.store.getActor(a.id);
         const roles = a.roles ?? existing?.roles ?? [];
-        const record3 = { ...a, roles, createdAt: existing?.createdAt ?? a.createdAt ?? this.now() };
-        await this.opts.store.upsertActor(record3);
-        this.opts.onRolesChanged?.(record3.id, record3.status === "active" ? roles : []);
+        const record4 = { ...a, roles, createdAt: existing?.createdAt ?? a.createdAt ?? this.now() };
+        if (isActiveCoordinatorAgent(record4)) {
+          const existingCoordinator = (await this.opts.store.listActors({ kind: "agent", status: "active" })).find((actor) => actor.id !== record4.id && isActiveCoordinatorAgent(actor));
+          if (existingCoordinator) {
+            throw new Error(
+              `\u7CFB\u7EDF\u53EA\u80FD\u6709\u4E00\u4E2A\u534F\u8C03\u8005\u667A\u80FD\u4F53\uFF1A\u5DF2\u5B58\u5728 ${existingCoordinator.name}\uFF08${existingCoordinator.id}\uFF09\uFF0C\u4E0D\u80FD\u518D\u521B\u5EFA\u6216\u542F\u7528 ${record4.name}\uFF08${record4.id}\uFF09\u3002`
+            );
+          }
+        }
+        await this.opts.store.upsertActor(record4);
+        this.opts.onRolesChanged?.(record4.id, record4.status === "active" ? roles : []);
         await this.audit({ kind: "actor_upsert", actorId: a.id, by, at: this.now(), detail: { status: a.status, roles } });
-        return record3;
+        return record4;
       }
       /** 删除即停用（2.1 完成标准） */
       async disableActor(id, by) {
@@ -30104,10 +30494,10 @@ var init_service2 = __esm({
         const a = await this.opts.store.getActor(id);
         if (!a) throw new Error(`actor not found: ${id}`);
         const { avatar: _drop, ...rest } = a;
-        const record3 = ref === null ? rest : { ...rest, avatar: ref };
-        await this.opts.store.upsertActor(record3);
+        const record4 = ref === null ? rest : { ...rest, avatar: ref };
+        await this.opts.store.upsertActor(record4);
         await this.audit({ kind: "actor_upsert", actorId: id, by, at: this.now(), detail: { avatar: ref ?? "cleared" } });
-        return record3;
+        return record4;
       }
       /** 设置/清除团队图标引用（同头像约定；不接受 emoji，只接受 blob 引用） */
       async setTeamIcon(teamId, ref) {
@@ -31881,8 +32271,8 @@ var DEFAULT_COMPANY_ID, DEFAULT_COMPANY_SLUG, DEFAULT_COMPANY_NAME;
 var init_migrate = __esm({
   "../server/src/domains/companies/migrate.ts"() {
     "use strict";
-    DEFAULT_COMPANY_ID = "company:hq";
-    DEFAULT_COMPANY_SLUG = "hq";
+    DEFAULT_COMPANY_ID = "company:oasis";
+    DEFAULT_COMPANY_SLUG = "oasis";
     DEFAULT_COMPANY_NAME = "Oasis \u603B\u90E8";
   }
 });
@@ -31908,9 +32298,13 @@ var init_service3 = __esm({
     CompaniesService = class {
       store;
       now;
+      sender;
+      consoleUrl;
       constructor(opts) {
         this.store = opts.store;
         this.now = opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+        this.sender = opts.sender;
+        this.consoleUrl = opts.consoleUrl ?? "/";
       }
       /** 当前用户所属的公司（按 membership 聚合）。 */
       async listForUser(accountId) {
@@ -32001,6 +32395,16 @@ var init_service3 = __esm({
         await this.requireCompany(companyId);
         return this.store.listMembers(companyId);
       }
+      /** 成员视图：每条成员关系附上其账号的 email/name（无账号成员如 agent 为 null）。 */
+      async listMemberViews(companyId) {
+        const members = await this.listMembers(companyId);
+        const out = [];
+        for (const m2 of members) {
+          const acc = await this.store.getAccount(m2.accountId);
+          out.push({ ...m2, email: acc?.email ?? null, name: acc?.name ?? null });
+        }
+        return out;
+      }
       /**
        * 改成员角色。不变量「至少留 1 个 owner」：把唯一的 owner 降级会被拒。
        * 公司/成员不存在则抛 404。
@@ -32036,7 +32440,7 @@ var init_service3 = __esm({
        * 公司不存在则抛 404。
        */
       async createInvitation(companyId, email2, role) {
-        const mail = email2?.trim() ?? "";
+        const mail = email2?.trim().toLowerCase() ?? "";
         if (!mail) throw new CompanyError(400, "BAD_REQUEST", "\u7F3A\u5C11 email");
         if (!INVITABLE_ROLES.includes(role)) throw new CompanyError(400, "BAD_ROLE", `role \u987B\u4E3A ${INVITABLE_ROLES.join(" | ")}\uFF08owner \u4E0D\u7ECF\u9080\u8BF7\u4EA7\u751F\uFF09`);
         await this.requireCompany(companyId);
@@ -32054,11 +32458,16 @@ var init_service3 = __esm({
           expiresAt: new Date(nowMs + INVITATION_TTL_MS).toISOString()
         };
         await this.store.createInvitation(invitation);
+        if (this.sender) {
+          const company = await this.store.getCompany(companyId);
+          const companyName = company?.name ?? companyId;
+          void this.sender.sendInvitation(mail, { companyName, consoleUrl: this.consoleUrl }).catch((e) => console.error(`[companies] \u9080\u8BF7\u90AE\u4EF6\u53D1\u9001\u5931\u8D25 ${mail}: ${e instanceof Error ? e.message : String(e)}`));
+        }
         return invitation;
       }
       /** 列出发给某邮箱的有效（pending 未过期）邀请；顺带把过期的 pending 落为 expired。 */
       async listInvitationsForEmail(email2) {
-        const all = await this.store.listInvitations({ email: email2 });
+        const all = await this.store.listInvitations({ email: email2.trim().toLowerCase() });
         const out = [];
         for (const inv of all) {
           if (inv.status !== "pending") continue;
@@ -32152,7 +32561,7 @@ function companiesDomain(opts) {
       return { status: 200, body: { ok: true } };
     });
     router.get("/api/companies/:id/members", async (req) => {
-      const items = await service.listMembers(req.params.id).catch(mapErr);
+      const items = await service.listMemberViews(req.params.id).catch(mapErr);
       return { status: 200, body: { items } };
     });
     router.patch("/api/companies/:id/members/:accountId", async (req) => {
@@ -32199,7 +32608,12 @@ var init_routes3 = __esm({
 
 // ../server/src/domains/companies/index.ts
 function createCompaniesDomain(opts) {
-  const service = new CompaniesService({ store: opts.store, ...opts.now !== void 0 ? { now: opts.now } : {} });
+  const service = new CompaniesService({
+    store: opts.store,
+    ...opts.now !== void 0 ? { now: opts.now } : {},
+    ...opts.sender !== void 0 ? { sender: opts.sender } : {},
+    ...opts.consoleUrl !== void 0 ? { consoleUrl: opts.consoleUrl } : {}
+  });
   const currentUser = opts.currentUser ?? makeCurrentUser(opts.store);
   return { service, register: companiesDomain({ service, currentUser, ...opts.blobs !== void 0 ? { blobs: opts.blobs } : {} }), currentUser };
 }
@@ -32302,6 +32716,14 @@ function parseCookies(header) {
   }
   return out;
 }
+function looksLikeEmail(s2) {
+  return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(s2);
+}
+function maskEmail(email2) {
+  const at = email2.indexOf("@");
+  if (at <= 0) return "***";
+  return `${email2[0]}***${email2.slice(at)}`;
+}
 function createAuth(opts) {
   const now = opts.now ?? (() => Date.now());
   const cookieName = opts.cookieName ?? "oasis_auth";
@@ -32310,7 +32732,6 @@ function createAuth(opts) {
   const maxAttempts = opts.maxCodeAttempts ?? 5;
   const resendThrottleMs = opts.resendThrottleMs ?? 30 * 1e3;
   const { store, sender, jwtSecret } = opts;
-  const hasPendingInvite = async (email2) => (await store.listInvitations({ email: email2, status: "pending" })).some((inv) => Date.parse(inv.expiresAt) > now());
   const sessionCookie = (accountId, tokenVersion) => {
     const t = now();
     const jwt = signSession({ sub: accountId, tokenVersion, iat: t, exp: t + sessionTtlMs }, jwtSecret);
@@ -32367,26 +32788,23 @@ function createAuth(opts) {
       if (method !== "POST") return { status: 405, body: { error: { code: "METHOD_NOT_ALLOWED", message: method } } };
       if (route === "request-code") {
         const email2 = typeof parsed.email === "string" ? parsed.email.trim().toLowerCase() : "";
-        if (email2) {
-          const account = await store.getAccountByEmail(email2);
-          const eligible = !!account || !!opts.provisionAccount && await hasPendingInvite(email2);
-          if (eligible) {
-            const existing = await store.getVerificationCode(email2);
-            const fresh = existing && Date.parse(existing.createdAt) > now() - resendThrottleMs;
-            if (!fresh) {
-              const code = generateCode();
-              const t = now();
-              await store.putVerificationCode({
-                email: email2,
-                codeHash: hashCode(code, jwtSecret),
-                createdAt: new Date(t).toISOString(),
-                expiresAt: new Date(t + codeTtlMs).toISOString(),
-                attempts: 0
-              });
-              try {
-                await sender.sendCode(email2, code);
-              } catch {
-              }
+        if (looksLikeEmail(email2)) {
+          const existing = await store.getVerificationCode(email2);
+          const fresh = existing && Date.parse(existing.createdAt) > now() - resendThrottleMs;
+          if (!fresh) {
+            const code = generateCode();
+            const t = now();
+            await store.putVerificationCode({
+              email: email2,
+              codeHash: hashCode(code, jwtSecret),
+              createdAt: new Date(t).toISOString(),
+              expiresAt: new Date(t + codeTtlMs).toISOString(),
+              attempts: 0
+            });
+            try {
+              await sender.sendCode(email2, code);
+            } catch (e) {
+              console.error(`[auth] \u9A8C\u8BC1\u7801\u53D1\u9001\u5931\u8D25 ${maskEmail(email2)}: ${e instanceof Error ? e.message : String(e)}`);
             }
           }
         }
@@ -32409,7 +32827,7 @@ function createAuth(opts) {
         }
         await store.deleteVerificationCode(email2);
         let account = await store.getAccountByEmail(email2);
-        if (!account && opts.provisionAccount && await hasPendingInvite(email2)) {
+        if (!account && opts.provisionAccount) {
           account = await opts.provisionAccount(email2);
         }
         if (!account) return fail();
@@ -32456,6 +32874,9 @@ function consoleSender() {
   return {
     async sendCode(email2, code) {
       console.log(`[auth] \u9A8C\u8BC1\u7801 \u2192 ${email2}: ${code}`);
+    },
+    async sendInvitation(email2, opts) {
+      console.log(`[auth] \u9080\u8BF7 \u2192 ${email2}: \u52A0\u5165\u300C${opts.companyName}\u300D\uFF0C\u767B\u5F55 ${opts.consoleUrl}`);
     }
   };
 }
@@ -32477,6 +32898,22 @@ function resendSender(opts) {
         const detail = await res.text().catch(() => "");
         throw new Error(`Resend \u53D1\u9001\u5931\u8D25 ${res.status}: ${detail.slice(0, 200)}`);
       }
+    },
+    async sendInvitation(email2, { companyName, consoleUrl }) {
+      const res = await doFetch("https://api.resend.com/emails", {
+        method: "POST",
+        headers: { authorization: `Bearer ${opts.apiKey}`, "content-type": "application/json" },
+        body: JSON.stringify({
+          from: opts.from,
+          to: [email2],
+          subject: `\u4F60\u88AB\u9080\u8BF7\u52A0\u5165\u300C${companyName}\u300D`,
+          html: `<div style="font-family:sans-serif;max-width:440px;margin:0 auto"><h2>\u52A0\u5165\u300C${companyName}\u300D</h2><p>\u4F60\u88AB\u9080\u8BF7\u52A0\u5165 Oasis \u4E0A\u7684\u300C${companyName}\u300D\u3002</p><p style="margin:24px 0"><a href="${consoleUrl}" style="background:#111;color:#fff;padding:10px 20px;border-radius:8px;text-decoration:none">\u767B\u5F55\u5E76\u63A5\u53D7\u9080\u8BF7</a></p><p style="color:#666;font-size:14px">\u7528<strong>\u672C\u90AE\u7BB1</strong>\u767B\u5F55\uFF08\u90AE\u7BB1\u9A8C\u8BC1\u7801\uFF09\uFF0C\u767B\u5F55\u540E\u5728\u516C\u53F8\u5207\u6362\u5904\u5373\u53EF\u770B\u5230\u5E76\u63A5\u53D7\u8FD9\u6761\u9080\u8BF7\u3002\u9080\u8BF7 7 \u5929\u5185\u6709\u6548\u3002</p><p style="color:#666;font-size:13px">\u94FE\u63A5\u6253\u4E0D\u5F00\u5C31\u76F4\u63A5\u8BBF\u95EE\uFF1A${consoleUrl}</p></div>`
+        })
+      });
+      if (!res.ok) {
+        const detail = await res.text().catch(() => "");
+        throw new Error(`Resend \u9080\u8BF7\u53D1\u9001\u5931\u8D25 ${res.status}: ${detail.slice(0, 200)}`);
+      }
     }
   };
 }
@@ -32952,11 +33389,11 @@ var init_types3 = __esm({
 });
 
 // ../server/src/node-store.ts
-var fs5, MemoryNodeStore, FileNodeStore;
+var fs6, MemoryNodeStore, FileNodeStore;
 var init_node_store = __esm({
   "../server/src/node-store.ts"() {
     "use strict";
-    fs5 = __toESM(require("node:fs"), 1);
+    fs6 = __toESM(require("node:fs"), 1);
     MemoryNodeStore = class {
       nodes = /* @__PURE__ */ new Map();
       runtimes = /* @__PURE__ */ new Map();
@@ -33037,16 +33474,16 @@ var init_node_store = __esm({
       static async open(file) {
         const s2 = new _FileNodeStore(file);
         try {
-          const snap = JSON.parse(fs5.readFileSync(file, "utf8"));
+          const snap = JSON.parse(fs6.readFileSync(file, "utf8"));
           for (const n of snap.nodes ?? []) s2.nodes.set(n.id, n);
           for (const r of snap.runtimes ?? []) s2.runtimes.set(r.id, r);
         } catch {
-          fs5.writeFileSync(file, JSON.stringify({ nodes: [], runtimes: [] }, null, 2));
+          fs6.writeFileSync(file, JSON.stringify({ nodes: [], runtimes: [] }, null, 2));
         }
         return s2;
       }
       flush() {
-        fs5.writeFileSync(this.file, JSON.stringify({
+        fs6.writeFileSync(this.file, JSON.stringify({
           nodes: [...this.nodes.values()],
           runtimes: [...this.runtimes.values()]
         }, null, 2));
@@ -33094,7 +33531,7 @@ var init_node_store = __esm({
 });
 
 // ../server/src/domains/collab/workorder-detail.ts
-function buildWorkorderDetail(model, workspaceId, resolveActor, resolveProject, dispatchJournal = [], dispatchPausedOf) {
+function buildWorkorderDetail(model, workspaceId, resolveActor, resolveProject, dispatchJournal = [], dispatchPausedOf, ops = []) {
   const arts = [...model.artifacts.values()].filter((a) => a.workspace === workspaceId);
   if (arts.length === 0) return null;
   const summary = buildWorkorderSummaries(model, resolveActor, resolveProject, dispatchPausedOf).find((w2) => w2.id === workspaceId);
@@ -33111,13 +33548,16 @@ function buildWorkorderDetail(model, workspaceId, resolveActor, resolveProject,
   const runtimeByArtifact = buildRuntimeByArtifact(dispatchJournal, ref);
   const nodes = arts.map((a) => {
     const info = nodeInfo(model, a);
-    const runtime = runtimeByArtifact.get(a.id);
+    const observedRuntime = runtimeByArtifact.get(a.id);
+    const runtime = observedRuntime && shouldExposeRuntime(model, a.id, info, observedRuntime) ? observedRuntime : void 0;
+    const baseStage = deriveNodeStage(info);
+    const stage = runtime?.status === "running" && (runtime.action === "produce" || runtime.action === "integrate") && (baseStage === "embryo" || baseStage === "merged" || baseStage === "review") ? "editing" : baseStage;
     const lifecycle = lifecycleOf(model, a.id);
     return {
       id: a.id,
       type: a.type,
       label: nodeLabel(a),
-      stage: deriveNodeStage(info),
+      stage,
       currentRev: a.currentRev,
       queue: info.queueLen,
       blocked: blockedOf(model, a.id).blocked,
@@ -33131,6 +33571,7 @@ function buildWorkorderDetail(model, workspaceId, resolveActor, resolveProject,
     (a) => a.inputs.map((e) => ({ from: a.id, to: e.to, pinned: e.pinned, required: e.required }))
   );
   const activity = buildActivity(model, arts, ref);
+  const coordinatorActivity = buildCoordinatorActivity(arts, ops, ref);
   const acceptance = buildAcceptance(model, arts);
   const planning = planningStatusOf(model, arts);
   const spec = workorderSpecOf(model, arts);
@@ -33138,11 +33579,72 @@ function buildWorkorderDetail(model, workspaceId, resolveActor, resolveProject,
     summary,
     graph: { nodes, edges },
     activity,
+    coordinatorActivity,
     acceptance,
     ...spec?.acceptanceCriteria ? { acceptanceCriteria: spec.acceptanceCriteria } : {},
     planning
   };
 }
+function buildWorkorderDraftDetail(draft, resolveActor) {
+  const ref = (id) => {
+    const extra = resolveActor?.(id);
+    return { id, ...extra?.name ? { name: extra.name } : {}, ...extra?.role ? { role: extra.role } : {}, ...extra?.avatar ? { avatar: extra.avatar } : {} };
+  };
+  const spawns = draft.plan.ops.filter((op) => op.action === "spawn" && !!op.id);
+  const nodes = spawns.map((op) => ({
+    id: op.id,
+    type: op.type,
+    label: op.title ?? op.description ?? op.id,
+    stage: "embryo",
+    currentRev: null,
+    queue: 0,
+    blocked: false,
+    owner: ref(op.owner ?? draft.draftedBy)
+  }));
+  const edges = [
+    ...spawns.flatMap((op) => (op.inputs ?? []).map((inp) => ({ from: op.id, to: inp.to, pinned: null, required: inp.required ?? true }))),
+    ...draft.plan.ops.filter((op) => op.action === "link").map((op) => ({ from: op.artifactId, to: op.to, pinned: null, required: op.required ?? true }))
+  ];
+  const rootSpawn = spawns.find((op) => op.id === draft.rootArtifactId);
+  const title = rootSpawn?.title ?? rootSpawn?.description ?? draft.workspace;
+  const participantIds = [...new Set(nodes.map((n) => n.owner.id))];
+  const summary = {
+    id: draft.workspace,
+    title,
+    ...draft.seed.brief && draft.seed.brief !== title ? { description: draft.seed.brief } : {},
+    ...draft.seed.goal ? { goal: draft.seed.goal } : {},
+    stage: "draft",
+    owner: ref(draft.draftedBy),
+    participants: participantIds.map((id) => ref(id)),
+    artifactCount: nodes.length,
+    progress: { concluded: 0, total: nodes.length },
+    updatedAt: draft.at,
+    projectId: null,
+    ...draft.seed.dispatch === false ? { dispatchPaused: true } : {}
+  };
+  return {
+    summary,
+    graph: { nodes, edges },
+    activity: [],
+    coordinatorActivity: [],
+    acceptance: [],
+    ...draft.seed.acceptanceCriteria ? { acceptanceCriteria: draft.seed.acceptanceCriteria } : {}
+  };
+}
+function isRuntimeFailure(runtime) {
+  return runtime.status === "failed" || runtime.status === "fused" || runtime.status === "escalated";
+}
+function shouldExposeRuntime(model, artifactId, info, runtime) {
+  if (!isRuntimeFailure(runtime)) return true;
+  if (info.concluded) return false;
+  const lastOpAt = model.lastOpAt.get(artifactId);
+  const runtimeAt = runtime.finishedAt ?? runtime.startedAt;
+  if (!lastOpAt || !runtimeAt) return true;
+  const lastOpTime = Date.parse(lastOpAt);
+  const runtimeTime = Date.parse(runtimeAt);
+  if (!Number.isFinite(lastOpTime) || !Number.isFinite(runtimeTime)) return true;
+  return lastOpTime <= runtimeTime;
+}
 function buildRuntimeByArtifact(entries, ref) {
   const byJob = /* @__PURE__ */ new Map();
   for (const entry of entries) {
@@ -33191,7 +33693,16 @@ function buildRuntimeByArtifact(entries, ref) {
   const byArtifact = /* @__PURE__ */ new Map();
   for (const value of byJob.values()) {
     const old = byArtifact.get(value.artifactId);
-    if (!old || old.at < value.at) byArtifact.set(value.artifactId, value);
+    if (!old) {
+      byArtifact.set(value.artifactId, value);
+      continue;
+    }
+    if (old.status === "running" && value.status !== "running") continue;
+    if (old.status !== "running" && value.status === "running") {
+      byArtifact.set(value.artifactId, value);
+      continue;
+    }
+    if (old.at < value.at) byArtifact.set(value.artifactId, value);
   }
   return new Map([...byArtifact].map(([id, value]) => {
     const { at: _at, artifactId: _artifactId, ...runtime } = value;
@@ -33249,6 +33760,65 @@ function buildActivity(model, arts, ref) {
   }
   return events.sort((x2, y) => x2.at < y.at ? -1 : x2.at > y.at ? 1 : x2.seq - y.seq);
 }
+function buildCoordinatorActivity(arts, ops, ref) {
+  const inWorkspace = new Set(arts.map((a) => a.id));
+  const firstRevisionAt = ops.filter((op) => op.kind === "propose_revision" && inWorkspace.has(op.artifactId)).map((op) => op.timestamp).sort()[0];
+  const edits = [];
+  for (const op of ops) {
+    if (!inWorkspace.has(op.artifactId)) continue;
+    if (op.actor !== COORDINATOR_ACTOR) continue;
+    if (!COORDINATOR_EDIT_KINDS.has(op.kind)) continue;
+    const kind = op.kind;
+    if ((kind === "spawn_artifact" || kind === "link_input") && (!firstRevisionAt || op.timestamp < firstRevisionAt)) {
+      continue;
+    }
+    const detail = coordinatorEditDetail(kind, op.payload, ref);
+    edits.push({
+      seq: op.seq,
+      at: op.timestamp,
+      actor: ref(op.actor),
+      kind,
+      artifactId: op.artifactId,
+      label: COORDINATOR_EDIT_LABEL[kind],
+      ...detail ? { detail } : {}
+    });
+  }
+  return edits.sort((x2, y) => x2.at < y.at ? -1 : x2.at > y.at ? 1 : x2.seq - y.seq);
+}
+function coordinatorEditDetail(kind, payload, ref) {
+  const str2 = (v2) => typeof v2 === "string" && v2.trim() ? v2 : void 0;
+  switch (kind) {
+    case "link_input":
+    case "unlink_input":
+      return str2(payload.to);
+    case "spawn_artifact":
+      return str2(payload.title) ?? str2(payload.type);
+    case "assign_owner": {
+      const owner = str2(payload.owner);
+      return owner ? ref(owner).name ?? owner : void 0;
+    }
+    case "bump_pin": {
+      const to = str2(payload.to);
+      const pinned = str2(payload.pinned);
+      return to && pinned ? `${to} \u2192 ${pinned}` : to ?? pinned;
+    }
+    case "report_gap":
+      return str2(payload.description);
+    case "edit_artifact": {
+      const changed = ["title", "description", "docType", "fields"].filter((k2) => payload[k2] !== void 0);
+      return changed.length ? changed.join("\u3001") : void 0;
+    }
+    case "seal": {
+      const reason = str2(payload.reason);
+      const note = str2(payload.note);
+      return [reason, note].filter(Boolean).join("\uFF1A") || void 0;
+    }
+    case "reopen":
+      return str2(payload.note);
+    default:
+      return void 0;
+  }
+}
 function buildAcceptance(model, arts) {
   return arts.map((a) => ({
     artifactId: a.id,
@@ -33256,12 +33826,36 @@ function buildAcceptance(model, arts) {
     state: isConcluded(model, a.id) ? "done" : a.currentRev ? "active" : "pending"
   }));
 }
+var COORDINATOR_EDIT_KINDS, COORDINATOR_EDIT_LABEL, COORDINATOR_ACTOR;
 var init_workorder_detail = __esm({
   "../server/src/domains/collab/workorder-detail.ts"() {
     "use strict";
     init_src2();
     init_node_state();
     init_workorders();
+    COORDINATOR_EDIT_KINDS = /* @__PURE__ */ new Set([
+      "link_input",
+      "unlink_input",
+      "spawn_artifact",
+      "assign_owner",
+      "bump_pin",
+      "report_gap",
+      "edit_artifact",
+      "seal",
+      "reopen"
+    ]);
+    COORDINATOR_EDIT_LABEL = {
+      link_input: "\u63A5\u5165\u4F9D\u8D56",
+      unlink_input: "\u79FB\u9664\u4F9D\u8D56",
+      spawn_artifact: "\u65B0\u5EFA\u4EA4\u4ED8\u7269",
+      assign_owner: "\u6539\u6D3E",
+      bump_pin: "\u89E6\u53D1\u8FD4\u5DE5",
+      report_gap: "\u7559\u7F3A\u53E3",
+      edit_artifact: "\u6539\u4EA4\u4ED8\u7269\u4FE1\u606F",
+      seal: "\u5C01\u5B58",
+      reopen: "\u91CD\u542F"
+    };
+    COORDINATOR_ACTOR = "actor:agent:coordinator";
   }
 });
 
@@ -33311,7 +33905,7 @@ function buildInbox(model, me) {
     if (gate?.gate && gate.gate.eligible.includes(me)) {
       const voted = (model.reviews.get(gate.head) ?? []).some((v2) => v2.author === me);
       if (!voted) {
-        out.push({ kind: "review-request", artifactId: a.id, workspace: ws, revisionId: gate.head, since: gate.at, actionRequired: true, summary: `\u5F85\u4F60\u5BA1\u6279\uFF1A${label}\uFF08quorum=${gate.gate.quorum}\uFF09` });
+        out.push({ kind: "review-request", artifactId: a.id, workspace: ws, since: gate.at, actionRequired: true, summary: `\u5F85\u4F60\u5BA1\u6279\uFF1A${label}\uFF08quorum=${gate.gate.quorum}\uFF09` });
         continue;
       }
     }
@@ -33518,15 +34112,17 @@ function collabDomain(opts) {
       return { status: 200, body: { items: buildWorkorderSummaries(kernel.model, resolve3, resolveProject, dispatchPausedOf) } };
     });
     router.get("/api/workorders/:id", async (req) => {
-      const { kernel, registry: registry2, artifacts } = await resolveCtx(req.auth.companyId);
+      const { kernel, oplog, registry: registry2, artifacts } = await resolveCtx(req.auth.companyId);
       const resolve3 = await buildResolver(registry2);
       const resolveProject = await buildProjectResolver(artifacts);
       const dispatchPausedOf = await buildDispatchPausedResolver(artifacts);
-      const detail = buildWorkorderDetail(kernel.model, req.params.id, resolve3, resolveProject, opts.dispatchJournal?.() ?? [], dispatchPausedOf);
-      if (!detail) {
-        return { status: 404, body: { error: { code: "not_found", message: `\u5DE5\u5355\u4E0D\u5B58\u5728: ${req.params.id}` } } };
-      }
-      return { status: 200, body: detail };
+      const wsArts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === req.params.id);
+      const ops = (await Promise.all(wsArts.map((a) => oplog.read(a.id)))).flat();
+      const detail = buildWorkorderDetail(kernel.model, req.params.id, resolve3, resolveProject, opts.dispatchJournal?.() ?? [], dispatchPausedOf, ops);
+      if (detail) return { status: 200, body: detail };
+      const draft = opts.workorderDrafts?.forWorkspace(req.params.id);
+      if (draft) return { status: 200, body: buildWorkorderDraftDetail(draft, resolve3) };
+      return { status: 404, body: { error: { code: "not_found", message: `\u5DE5\u5355\u4E0D\u5B58\u5728: ${req.params.id}` } } };
     });
     router.post("/api/workorders/:id/dispatch", async (req) => {
       const { kernel, artifacts } = await resolveCtx(req.auth.companyId);
@@ -33549,7 +34145,7 @@ function collabDomain(opts) {
       const q = req.query;
       const audit = {};
       const actor = q.get("actor");
-      if (actor) audit.actor = actor;
+      audit.actor = actor && actor !== "me" ? actor : req.auth.actor;
       const kind = q.get("kind");
       if (kind) audit.kind = kind;
       const from = q.get("from");
@@ -33613,12 +34209,75 @@ var init_collab = __esm({
 });
 
 // ../server/src/domains/trace/service.ts
-var EVENT_PAGE_LIMIT, TraceService;
+function rawObj(event) {
+  const payload = event.payload;
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) return null;
+  const raw = payload["raw"];
+  return raw && typeof raw === "object" && !Array.isArray(raw) ? raw : null;
+}
+function payloadObj(event) {
+  const payload = event.payload;
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : null;
+}
+function modelChunkKind(event) {
+  if (event.stream !== "model") return null;
+  const payload = payloadObj(event);
+  const kind = payload?.["kind"] ?? rawObj(event)?.["kind"];
+  if (kind === "message" || kind === "thought") return kind;
+  return null;
+}
+function modelText(event) {
+  const raw = rawObj(event);
+  const text = raw?.["text"];
+  if (typeof text === "string") return text;
+  return typeof event.message === "string" ? event.message : null;
+}
+function eventTimeMs(event) {
+  const t = Date.parse(event.startedAt ?? event.createdAt);
+  return Number.isFinite(t) ? t : null;
+}
+function eventEndTimeMs(event) {
+  const t = Date.parse(event.endedAt ?? event.startedAt ?? event.createdAt);
+  return Number.isFinite(t) ? t : null;
+}
+function canCompactModelChunk(prev, next) {
+  const kind = modelChunkKind(prev);
+  if (!kind || kind !== modelChunkKind(next)) return false;
+  const a = eventEndTimeMs(prev);
+  const b2 = eventTimeMs(next);
+  if (a === null || b2 === null) return false;
+  return Math.abs(b2 - a) <= MODEL_CHUNK_COMPACT_WINDOW_MS;
+}
+function compactPair(prev, next) {
+  const text = `${modelText(prev) ?? ""}${modelText(next) ?? ""}`;
+  const prevPayload = payloadObj(prev) ?? {};
+  const prevRaw = rawObj(prev) ?? {};
+  return {
+    ...prev,
+    id: next.id,
+    seq: next.seq,
+    message: text.slice(0, 500),
+    payload: { ...prevPayload, raw: { ...prevRaw, text } },
+    endedAt: next.endedAt ?? next.startedAt ?? prev.endedAt
+  };
+}
+function compactModelChunks(rows) {
+  const out = [];
+  for (const row of rows) {
+    const prev = out[out.length - 1];
+    if (prev && canCompactModelChunk(prev, row)) out[out.length - 1] = compactPair(prev, row);
+    else out.push(row);
+  }
+  return out;
+}
+var EVENT_PAGE_LIMIT, MODEL_CHUNK_COMPACT_WINDOW_MS, MODEL_CHUNK_RAW_MULTIPLIER, TraceService;
 var init_service4 = __esm({
   "../server/src/domains/trace/service.ts"() {
     "use strict";
     init_src();
     EVENT_PAGE_LIMIT = 200;
+    MODEL_CHUNK_COMPACT_WINDOW_MS = 1500;
+    MODEL_CHUNK_RAW_MULTIPLIER = 20;
     TraceService = class {
       store;
       constructor(opts) {
@@ -33695,12 +34354,14 @@ var init_service4 = __esm({
       }
       async listEvents(runId, opts) {
         const limit = Math.min(opts.limit ?? EVENT_PAGE_LIMIT, EVENT_PAGE_LIMIT);
+        const rawLimit = Math.min(limit * MODEL_CHUNK_RAW_MULTIPLIER + 1, 5e3);
         const rows = await this.store.listEvents(runId, {
           ...opts.afterSeq !== void 0 ? { afterSeq: opts.afterSeq } : {},
-          limit: limit + 1
+          limit: rawLimit
         });
-        const hasMore = rows.length > limit;
-        const items = hasMore ? rows.slice(0, limit) : rows;
+        const compacted = compactModelChunks(rows);
+        const hasMore = rows.length > rawLimit - 1 || compacted.length > limit;
+        const items = compacted.length > limit ? compacted.slice(0, limit) : compacted;
         const nextCursor = hasMore ? String(items[items.length - 1].seq) : null;
         return { items, nextCursor };
       }
@@ -34266,6 +34927,18 @@ var init_sink = __esm({
         this.onError = opts.onError ?? (() => {
         });
       }
+      runtimeKindFor(session) {
+        if (this.runtimeKind !== "auto") return this.runtimeKind;
+        const runtimeKind = session.runtimeKind?.toLowerCase();
+        if (runtimeKind === "codex") return "codex";
+        if (runtimeKind === "hermes") return "hermes";
+        if (runtimeKind === "claude" || runtimeKind === "claude-code") return "claude-code";
+        const id = session.sessionId.toLowerCase();
+        if (id.startsWith("codex-")) return "codex";
+        if (id.startsWith("hermes-")) return "hermes";
+        if (id.startsWith("claude-") || id.startsWith("claudecode-")) return "claude-code";
+        return "custom";
+      }
       enqueue(sessionId, step) {
         const st = this.sessions.get(sessionId);
         if (!st) return;
@@ -34278,7 +34951,7 @@ var init_sink = __esm({
           await this.store.createRun({
             id: session.sessionId,
             actorId: session.actor,
-            runtimeKind: this.runtimeKind,
+            runtimeKind: this.runtimeKindFor(session),
             triggerKind: "dispatch",
             triggerRef: session.jobKey,
             jobKey: session.jobKey,
@@ -34395,6 +35068,69 @@ var init_sink = __esm({
   }
 });
 
+// ../server/src/domains/trace/chat-parts.ts
+function asObj2(v2) {
+  return v2 && typeof v2 === "object" && !Array.isArray(v2) ? v2 : void 0;
+}
+function textOf2(v2) {
+  if (typeof v2 === "string") return v2;
+  if (Array.isArray(v2)) return v2.map(textOf2).filter(Boolean).join("\n") || void 0;
+  const o = asObj2(v2);
+  if (o) {
+    if (typeof o.text === "string") return o.text;
+    if (typeof o.content === "string") return o.content;
+    if (typeof o.thinking === "string") return o.thinking;
+  }
+  return void 0;
+}
+function truncate(s2, limit = OUTPUT_PREVIEW_LIMIT) {
+  return s2.length > limit ? `${s2.slice(0, limit)}\u2026` : s2;
+}
+function deriveChatPartsFromEvents(events) {
+  const parts = [];
+  for (const ev of [...events].sort((a, b2) => a.seq - b2.seq)) {
+    const p2 = asObj2(ev.payload);
+    const kind = p2 && typeof p2.kind === "string" ? p2.kind : void 0;
+    const raw = p2?.raw;
+    if (kind === "thought") {
+      const text = textOf2(raw);
+      if (text) parts.push({ type: "thinking", seq: ev.seq, text });
+      continue;
+    }
+    if (kind === "tool_use") {
+      const ro = asObj2(raw);
+      parts.push({
+        type: "tool_use",
+        seq: ev.seq,
+        toolName: ro && typeof ro.name === "string" ? ro.name : "tool",
+        ...ro && ro.input !== void 0 ? { input: ro.input } : {},
+        ...ro && typeof ro.id === "string" ? { toolCallId: ro.id } : {}
+      });
+      continue;
+    }
+    if (kind === "tool_result") {
+      const ro = asObj2(raw);
+      const output = textOf2(raw) ?? "";
+      parts.push({
+        type: "tool_result",
+        seq: ev.seq,
+        output: truncate(output),
+        isError: ro?.is_error === true || ro?.isError === true,
+        ...ro && typeof ro.tool_use_id === "string" ? { toolCallId: ro.tool_use_id } : {}
+      });
+      continue;
+    }
+  }
+  return parts;
+}
+var OUTPUT_PREVIEW_LIMIT;
+var init_chat_parts = __esm({
+  "../server/src/domains/trace/chat-parts.ts"() {
+    "use strict";
+    OUTPUT_PREVIEW_LIMIT = 4e3;
+  }
+});
+
 // ../server/src/domains/trace/index.ts
 function createTraceDomain(opts) {
   const service = new TraceService({ store: opts.store });
@@ -34408,6 +35144,7 @@ var init_trace2 = __esm({
     init_service4();
     init_routes5();
     init_sink();
+    init_chat_parts();
   }
 });
 
@@ -34418,6 +35155,15 @@ function createChatSessionsDomain(opts) {
     const binding = await registry2.getBinding(aiActorId).catch(() => null);
     return binding?.nodeId ?? null;
   }
+  async function enrichMessages(messages) {
+    if (!opts.trace) return messages;
+    return Promise.all(messages.map(async (m2) => {
+      if (!m2.runId) return m2;
+      const events = await opts.trace.listEvents(m2.runId, {}).catch(() => []);
+      const parts = deriveChatPartsFromEvents(events);
+      return parts.length ? { ...m2, parts } : m2;
+    }));
+  }
   return (router) => {
     router.get("/api/chat-sessions", async (req) => {
       const sessions = await store.listSessions(req.auth.actor);
@@ -34444,10 +35190,11 @@ function createChatSessionsDomain(opts) {
     router.get("/api/chat-sessions/:id", async (req) => {
       const session = await store.getSession(req.params.id);
       if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
-      const [messages, curRuntimeId] = await Promise.all([
+      const [rawMessages, curRuntimeId] = await Promise.all([
         store.listMessages(session.id),
         currentRuntimeId(session.aiActorId)
       ]);
+      const messages = await enrichMessages(rawMessages);
       const detail = { ...session, currentRuntimeId: curRuntimeId, messages };
       return { status: 200, body: detail };
     });
@@ -34482,12 +35229,30 @@ function createChatSessionsDomain(opts) {
         role: body.role,
         content: body.content,
         seq: existing.length + 1,
-        createdAt: (/* @__PURE__ */ new Date()).toISOString()
+        createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+        ...body.runId ? { runId: body.runId } : {}
       };
       await store.appendMessage(msg);
       await store.updateSession(req.params.id, { touchedAt: (/* @__PURE__ */ new Date()).toISOString() });
       return { status: 201, body: msg };
     });
+    router.get("/api/chat-sessions/:id/work-orders", async (req) => {
+      const session = await store.getSession(req.params.id);
+      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      const workOrderIds = await store.listWorkOrdersForSession(req.params.id);
+      if (!opts.kernel || workOrderIds.length === 0) return { status: 200, body: { items: [] } };
+      const bindings = opts.artifactState ? await opts.artifactState.listWorkspaceBindings() : [];
+      const byWo = new Map(bindings.map((b2) => [b2.workOrderId, b2.projectId]));
+      const actors = opts.kernel ? await registry2.listActors().catch(() => []) : [];
+      const byId = new Map(actors.map((a) => [a.id, a]));
+      const resolver = (id) => {
+        const a = byId.get(id);
+        return a ? { name: a.name } : void 0;
+      };
+      const allSummaries = buildWorkorderSummaries(opts.kernel.model, resolver, (wo) => byWo.get(wo) ?? null);
+      const items = allSummaries.filter((s2) => workOrderIds.includes(s2.id));
+      return { status: 200, body: { items } };
+    });
   };
 }
 var import_node_crypto10;
@@ -34496,6 +35261,8 @@ var init_chat_sessions = __esm({
     "use strict";
     import_node_crypto10 = require("node:crypto");
     init_router();
+    init_workorders();
+    init_chat_parts();
   }
 });
 
@@ -35826,22 +36593,22 @@ var init_engine = __esm({
 });
 
 // ../server/src/mirror/fs-state.ts
-var fs6, FsMirrorStateStore;
+var fs7, FsMirrorStateStore;
 var init_fs_state = __esm({
   "../server/src/mirror/fs-state.ts"() {
     "use strict";
-    fs6 = __toESM(require("node:fs"), 1);
+    fs7 = __toESM(require("node:fs"), 1);
     FsMirrorStateStore = class {
       constructor(file) {
         this.file = file;
-        if (fs6.existsSync(file)) {
-          const obj = JSON.parse(fs6.readFileSync(file, "utf8"));
+        if (fs7.existsSync(file)) {
+          const obj = JSON.parse(fs7.readFileSync(file, "utf8"));
           for (const [k2, v2] of Object.entries(obj)) this.map.set(k2, v2);
         }
       }
       map = /* @__PURE__ */ new Map();
       flush() {
-        fs6.writeFileSync(this.file, JSON.stringify(Object.fromEntries(this.map), null, 2));
+        fs7.writeFileSync(this.file, JSON.stringify(Object.fromEntries(this.map), null, 2));
       }
       async get(artifactId) {
         return this.map.get(artifactId) ?? null;
@@ -35858,12 +36625,12 @@ var init_fs_state = __esm({
 });
 
 // ../server/src/git/integrate.ts
-var import_node_child_process2, fs7, path4, GitRemoteIntegrator;
+var import_node_child_process2, fs8, path4, GitRemoteIntegrator;
 var init_integrate = __esm({
   "../server/src/git/integrate.ts"() {
     "use strict";
     import_node_child_process2 = require("node:child_process");
-    fs7 = __toESM(require("node:fs"), 1);
+    fs8 = __toESM(require("node:fs"), 1);
     path4 = __toESM(require("node:path"), 1);
     GitRemoteIntegrator = class {
       constructor(remote, cloneDir, develop = "develop") {
@@ -35881,8 +36648,8 @@ var init_integrate = __esm({
       }
       /** 确保本地工作克隆存在并拉到最新远程态。幂等。 */
       sync() {
-        if (!fs7.existsSync(path4.join(this.cloneDir, ".git"))) {
-          fs7.mkdirSync(path4.dirname(this.cloneDir), { recursive: true });
+        if (!fs8.existsSync(path4.join(this.cloneDir, ".git"))) {
+          fs8.mkdirSync(path4.dirname(this.cloneDir), { recursive: true });
           (0, import_node_child_process2.execFileSync)("git", ["clone", "--quiet", this.remote, this.cloneDir], { env: this.env, maxBuffer: 256 * 1024 * 1024 });
           this.git(["config", "user.email", "oasis@local"]);
           this.git(["config", "user.name", "oasis"]);
@@ -36021,13 +36788,14 @@ var init_resolve = __esm({
 });
 
 // ../server/src/coordinator/worker.ts
-var import_node_crypto13, COORDINATOR_ACTOR, COORDINATOR_SYSTEM_PROMPT, CoordinatorWorker;
+var import_node_crypto13, COORDINATOR_ACTOR2, COORDINATOR_SYSTEM_PROMPT, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
     import_node_crypto13 = require("node:crypto");
     init_src2();
-    COORDINATOR_ACTOR = "actor:agent:coordinator";
+    init_identity();
+    COORDINATOR_ACTOR2 = LEGACY_COORDINATOR_ACTOR;
     COORDINATOR_SYSTEM_PROMPT = `\u4F60\u662F Oasis \u534F\u4F5C\u56FE\u7684**\u534F\u8C03\u8005**\u3002\u4F60\u53EA\u7BA1**\u56FE\u7684\u7ED3\u6784**\uFF08\u8FDE\u8FB9 / \u65B0\u589E / \u53BB\u91CD / \u91CD\u6784 / \u6539\u8282\u70B9\u7684\u6807\u9898\u4E0E brief\uFF09\uFF0C**\u7EDD\u4E0D\u78B0\u5185\u5BB9**\uFF08\u4EA7\u7269\u6B63\u6587\u600E\u4E48\u5199\u662F\u5404 owner \u7684\u6D3B\uFF09\u3002
 \u539F\u5219\uFF1A\u2460 **\u53BB\u91CD\u4F18\u5148**\uFF0C\u80FD\u8FDE\u65E2\u6709\u5C31\u522B\u65B0\u5EFA\uFF1B\u2461 \u4F60\u505A\u7ED3\u6784 wiring\u3001\u4E0D\u505A\u5185\u5BB9\u8BC4\u5BA1\uFF1B\u2462 **\u62FF\u4E0D\u51C6\u5C31\u522B\u52A8\u3001\u522B\u786C\u8FDE**\uFF0C\u7ED3\u675F\u65F6\u4E00\u53E5\u8BDD\u8BF4\u660E\u7591\u8651\u3002
 
@@ -36037,8 +36805,12 @@ var init_worker = __esm({
 \u2462 **\u62FF\u4E0D\u51C6\u3001\u6216\u6839\u56E0\u4E0D\u5728\u56FE\u4E0A**\uFF08\u50CF\u8FD0\u884C\u65F6\u5361\u6B7B\u3001\u5185\u5BB9\u5199\u4E0D\u51FA\u3001\u9700\u6C42\u672C\u8EAB\u77DB\u76FE\uFF09\u2192 **\u522B\u52A8\u56FE**\uFF0C\u4E00\u53E5\u8BDD\u8BF4\u6E05\u4F60\u5224\u65AD\u7684\u6839\u56E0 + \u5EFA\u8BAE\u8C01\u5904\u7F6E\uFF0C\u6536\u5DE5\u3002**\u8BEF\u5220\u4E00\u6761\u672C\u8BE5\u7B49\u7684\u6D41\u7A0B\uFF0C\u6BD4\u665A\u6551\u4E00\u4F1A\u513F\u66F4\u7CDF\u3002**
 
 \u3010\u6539\u56FE\uFF1A\u6682\u5B58 \u2192 \u63D0\u4EA4\u3011\u4F60\u80FD\u7528\u7684\u6539\u56FE\u547D\u4EE4\uFF08**\u90FD\u5148\u8FDB\u7F16\u8F91\u7F13\u51B2\u3001\u4E0D\u7ACB\u5373\u6539\u771F\u56FE**\uFF1B\u6539\u5B8C\u7528 \`oasis apply\` \u4E00\u6B21\u6027\u63D0\u4EA4\uFF09\uFF1A
-- \`oasis link <consumer> --to <up> [--required true]\` \u2014\u2014 \u7ED9 consumer \u52A0\u4E00\u6761\u6307\u5411\u4E0A\u6E38 up \u7684\u4F9D\u8D56\u8FB9\u3002\`<consumer>\`\uFF08\u4F4D\u7F6E\u53C2\u6570\uFF09= \u8981\u52A0\u4F9D\u8D56\u7684\u4E0B\u6E38\u8282\u70B9 id\uFF1B\`--to <up>\` = \u88AB\u4F9D\u8D56\u7684\u4E0A\u6E38 id\uFF1B\`--required true\` = \u8FD9\u6761\u662F**\u963B\u585E\u6027**\u4F9D\u8D56\uFF08up \u6CA1 conclude\uFF0Cconsumer \u5C31\u52A8\u4E0D\u4E86\uFF09\uFF0C**\u7701\u7565\u5219\u662F\u8F6F\u4F9D\u8D56**\uFF08\u53EA\u8BB0\u5173\u7CFB\u3001\u4E0D\u963B\u585E\uFF09\u3002\u53BB\u91CD\u65F6\u7528\u5B83\u628A"\u8BE5\u8FDE\u65E2\u6709"\u7684\u8FB9\u8865\u4E0A\u3002
-- \`oasis spawn <id> --type <t> [--title "<\u77ED\u540D>"] [--brief "<\u89C4\u683C>"] [--input <up>[,<up2>\u2026]]\` \u2014\u2014 \u65B0\u5EFA\u4E00\u4E2A\u8282\u70B9\u3002\`<id>\`\uFF08\u4F4D\u7F6E\u53C2\u6570\uFF09= \u65B0\u8282\u70B9 id\uFF08\u5F62\u5982 \`artifact:<type>:<\u540D>\`\uFF09\uFF1B\`--type <t>\` = \u7C7B\u578B\u540D\uFF08**\u5FC5\u586B**\uFF0C\u5148 \`oasis artifact-types\` \u770B\u53EF\u9009\u7C7B\u578B\u4E0E\u7528\u9014\uFF09\uFF1B\`--title\` = \u77ED\u540D\uFF1B\`--brief\` = \u7ED9\u5B83\u7684\u4EA7\u51FA\u89C4\u683C\uFF08\u5199\u6E05\u8981\u505A\u6210\u4EC0\u4E48\uFF0C\u4F1A\u6210\u4E3A\u8BE5\u8282\u70B9 owner \u7684\u4EFB\u52A1\u4E66\uFF09\uFF1B\`--input\` = \u5B83\u4F9D\u8D56\u54EA\u4E9B\u4E0A\u6E38\uFF08**\u9017\u53F7\u5206\u9694**\u591A\u4E2A\uFF09\u3002**\u786E\u65E0\u65E2\u6709\u53EF\u8FDE\u3001\u662F\u771F\u65B0\u9700\u6C42\u624D\u7528**\u3002
+
+> **\u600E\u4E48\u6307\u4E00\u4E2A\u8282\u70B9\uFF08\u5F15\u7528\u5199\u6CD5\uFF09**\uFF1A\u4E0B\u9762\u547D\u4EE4\u91CC\u51E1\u662F\u6307\u8282\u70B9\u7684\u53C2\u6570\uFF08\`<consumer>\`/\`<up>\`/\`<id>\`\uFF09\uFF0C\u4E09\u79CD\u5199\u6CD5\u90FD\u884C\u2014\u2014
+> **\u88F8 type**\uFF08\u5982 \`dev\`,\u8BE5 type \u53EA\u6709\u4E00\u4E2A\u8282\u70B9\u65F6\u6700\u7701\u4E8B\uFF09/ **\`type:title\`**\uFF08\u5982 \`prd:\u540E\u7AEF\u9700\u6C42\`,\u4E00\u4E2A type \u6709\u591A\u4E2A\u8282\u70B9\u65F6\u7528 title \u533A\u5206\uFF09/ **\u5B8C\u6574 id**\u3002\u7CFB\u7EDF\u81EA\u52A8\u89E3\u6790;**\u5199\u5F97\u592A\u6CDB\u3001\u649E\u5230\u591A\u4E2A**\u4F1A\u628A\u5019\u9009\u5217\u7ED9\u4F60,\u6311\u4E2A\u66F4\u5177\u4F53\u7684\u91CD\u53D1\u5373\u53EF\u3002\u5DE5\u5355\u6839\u7528 \`brief\`\u3002**\u4F60\u4E0D\u7528\u81EA\u5DF1\u7F16 id\u3002**
+
+- \`oasis link <consumer> --to <up> [--required true]\` \u2014\u2014 \u7ED9 consumer \u52A0\u4E00\u6761\u6307\u5411\u4E0A\u6E38 up \u7684\u4F9D\u8D56\u8FB9\u3002\`<consumer>\` = \u8981\u52A0\u4F9D\u8D56\u7684\u4E0B\u6E38\u8282\u70B9\uFF08\u5F15\u7528,\u89C1\u4E0A\uFF09\uFF1B\`--to <up>\` = \u88AB\u4F9D\u8D56\u7684\u4E0A\u6E38\uFF1B\`--required true\` = \u8FD9\u6761\u662F**\u963B\u585E\u6027**\u4F9D\u8D56\uFF08up \u6CA1 conclude\uFF0Cconsumer \u5C31\u52A8\u4E0D\u4E86\uFF09\uFF0C**\u7701\u7565\u5219\u662F\u8F6F\u4F9D\u8D56**\uFF08\u53EA\u8BB0\u5173\u7CFB\u3001\u4E0D\u963B\u585E\uFF09\u3002\u53BB\u91CD\u65F6\u7528\u5B83\u628A"\u8BE5\u8FDE\u65E2\u6709"\u7684\u8FB9\u8865\u4E0A\u3002
+- \`oasis spawn --type <t> --title "<\u77ED\u540D>" [--brief "<\u89C4\u683C>"] [--input <ref>[,\u2026]]\` \u2014\u2014 \u65B0\u5EFA\u4E00\u4E2A\u8282\u70B9\u3002**id \u4E0D\u7528\u4F60\u7ED9,\u7CFB\u7EDF\u636E (type,title) \u81EA\u52A8\u6D3E\u751F**\u3002\`--type <t>\` = \u7C7B\u578B\u540D\uFF08**\u5FC5\u586B**\uFF0C\u5148 \`oasis artifact-types\` \u770B\u53EF\u9009\u7C7B\u578B\u4E0E\u7528\u9014\uFF09\uFF1B\`--title\` = \u77ED\u540D\uFF08**\u5FC5\u586B\u3001\u540C type \u4E0B\u552F\u4E00**,\u649E\u540D\u4F1A\u8BA9\u4F60\u6539\uFF09\uFF1B\`--brief\` = \u7ED9\u5B83\u7684\u4EA7\u51FA\u89C4\u683C\uFF08\u5199\u6E05\u8981\u505A\u6210\u4EC0\u4E48\uFF0C\u4F1A\u6210\u4E3A\u8BE5\u8282\u70B9 owner \u7684\u4EFB\u52A1\u4E66\uFF09\uFF1B\`--input\` = \u5B83\u4F9D\u8D56\u54EA\u4E9B\u4E0A\u6E38\uFF08**\u9017\u53F7\u5206\u9694**\u591A\u4E2A,\u6BCF\u4E2A\u6309\u4E0A\u9762\u5F15\u7528\u5199\u6CD5\uFF09\u3002**\u786E\u65E0\u65E2\u6709\u53EF\u8FDE\u3001\u662F\u771F\u65B0\u9700\u6C42\u624D\u7528**\u3002
 - \`oasis edit <id> [--title "<\u65B0\u77ED\u540D>"] [--brief "<\u65B0\u89C4\u683C>"]\` \u2014\u2014 \u6539\u4E00\u4E2A**\u5DF2\u5B58\u5728**\u8282\u70B9\u7684\u6807\u9898 / brief\uFF08**\u53EA\u6539\u8FD9\u4E24\u6837\u5143\u6570\u636E\uFF0C\u7EDD\u4E0D\u78B0\u6B63\u6587**\uFF09\u3002\`<id>\` = \u88AB\u6539\u8282\u70B9\uFF1B\`--title\` / \`--brief\` \u7ED9\u54EA\u4E2A\u4F20\u54EA\u4E2A\u3002\u5408\u5E76\u53BB\u91CD\u65F6\u7528\u5B83\u628A\u4FDD\u7559\u4EF6\u7684 brief \u6269\u5199\u3002
 - \`oasis unlink <consumer> --to <up>\` \u2014\u2014 \u5220\u6389 consumer \u6307\u5411 up \u7684\u90A3\u6761\u4F9D\u8D56\u8FB9\u3002\`<consumer>\` = \u4E0B\u6E38\uFF1B\`--to <up>\` = \u4E0D\u518D\u4F9D\u8D56\u7684\u4E0A\u6E38\u3002\u6539\u8FDE\uFF08\u65AD\u9519\u8FB9 / \u6539\u8FDE\u5230\u6B63\u786E\u4E0A\u6E38\uFF09\u65F6\u7528\u3002
 - \`oasis cancel <id> [--note "<\u539F\u56E0>"]\` \u2014\u2014 **\u5F7B\u5E95\u5E9F\u5F03**\u4E00\u4E2A\u8282\u70B9\uFF1A\u5B83\u4E0D\u518D\u7B97\u6570\uFF0C\u7CFB\u7EDF**\u81EA\u52A8\u7EA7\u8054**\u65AD\u6389\u5B83\u6240\u6709\u4F9D\u8D56\u8FB9\u3001\u5E76\u91CD\u5524\u4E0B\u6E38\u8BA9\u5B83\u4EEC\u53BB\u6389\u5BF9\u5B83\u7684\u9002\u914D\u3002\`<id>\`\uFF08\u4F4D\u7F6E\u53C2\u6570\uFF09= \u88AB\u5E9F\u8282\u70B9\uFF1B\`--note\` = \u4E3A\u4EC0\u4E48\u5E9F\uFF08\u7559\u75D5\uFF09\u3002\u5EFA\u5728\u5DF2\u5E9F\u5730\u57FA\u4E0A\u3001\u6216\u8FD9\u8282\u70B9\u6839\u672C\u4E0D\u8BE5\u5B58\u5728\u65F6\u7528\u3002\u5E9F\u5F03\u540E\u8BE5\u8282\u70B9\u5728 \`oasis status\` \u91CC\u663E\u793A lifecycle=sealed:cancelled\u3002**\u9500\u6BC1\u6027**\u2014\u2014apply \u65F6\u6253\u5305\u6210\u63D0\u6848\u4EA4\u4EBA\u786E\u8BA4\u3002
@@ -36237,7 +37009,7 @@ var init_worker = __esm({
           ``,
           `## \u4F60\u7684\u52A8\u4F5C\uFF08\u6682\u5B58 \u2192 apply\uFF09`,
           `- \u67D0\u65E2\u6709\u6EE1\u8DB3\u8FD9\u9700\u6C42 \u2192 \`oasis link ${gap.artifactId} --to <\u65E2\u6709id>\`\uFF0C\`oasis apply --reason "\u2026"\`\uFF08apply \u540E\u81EA\u52A8\u89E3\u8FD9\u6761 gap\uFF09\u3002`,
-          `- \u786E\u65E0\u5339\u914D\u3001\u65B0\u9700\u6C42 \u2192 \`oasis spawn <\u65B0id> --type <\u7C7B\u578B> --title "<\u77ED\u540D>" --brief "${gap.description}"\` + \`oasis link ${gap.artifactId} --to <\u65B0id>\` \u2192 apply\u3002`,
+          `- \u786E\u65E0\u5339\u914D\u3001\u65B0\u9700\u6C42 \u2192 \`oasis spawn --type <\u7C7B\u578B> --title "<\u77ED\u540D>" --brief "${gap.description}"\`\uFF08\u4E0D\u7528\u7ED9 id\uFF09+ \`oasis link ${gap.artifactId} --to <\u7C7B\u578B>:<\u77ED\u540D>\`\uFF08\u6309 type:title \u5F15\u521A\u5EFA\u7684\uFF09\u2192 apply\u3002`,
           `- \u987A\u624B\u53D1\u73B0\u4E24\u4E2A\u4EA7\u7269\u91CD\u590D \u2192 **\u5148\u628A\u4E0A\u9762\u89E3 gap \u90A3\u7B14\u5355\u72EC apply \u6389**\uFF0C\u518D\u53E6\u8D77\u4E00\u7B14\uFF1A\`oasis edit\` \u6269\u4FDD\u7559\u4EF6 brief + \`oasis link\` \u628A\u6D88\u8D39\u8005\u6539\u8FDE\u5230\u4FDD\u7559\u4EF6 + \`oasis cancel\` \u5E9F\u5F03\u4EF6\uFF08\u81EA\u52A8\u65AD\u5B83\u7684\u8FB9\u3001\u91CD\u5524\u88AB\u6539\u8FDE\u7684\u6D88\u8D39\u8005\uFF09\uFF0C\u4E00\u8D77\u6682\u5B58\u518D apply\u3002`,
           `- \u62FF\u4E0D\u51C6 \u2192 \u522B\u6682\u5B58\uFF0C\u4E00\u53E5\u8BDD\u8BF4\u660E\u7591\u8651\u6536\u5DE5\u3002`
         ].join("\n");
@@ -36297,7 +37069,7 @@ var init_worker = __esm({
           ``,
           `## \u4F60\u7684\u52A8\u4F5C\uFF08\u6682\u5B58 \u2192 apply\uFF09`,
           `- \u5728**\u7B49\u4E00\u4E2A active\u3001\u6709 head/\u5728\u4EA7\u7684\u4E0A\u6E38** \u2192 **\u4E0D\u662F\u6B7B\u9501\uFF0C\u522B\u52A8**\uFF0C\u6536\u5DE5\uFF08\u53EF \`oasis status <\u4E0A\u6E38>\` \u786E\u8BA4\uFF09\u3002`,
-          `- **\u5B83\u81EA\u5DF1\u7684 gap \u6CA1\u89E3**\u3001\u4F60\u80FD\u5224 \u2192 \`oasis link ${p2.id} --to <\u65E2\u6709>\`\uFF0C\u6216 \`oasis spawn <\u65B0> --type <\u7C7B\u578B> --title \u2026 --brief \u2026\` + \`oasis link ${p2.id} --to <\u65B0>\` \u2192 apply\u3002`,
+          `- **\u5B83\u81EA\u5DF1\u7684 gap \u6CA1\u89E3**\u3001\u4F60\u80FD\u5224 \u2192 \`oasis link ${p2.id} --to <\u65E2\u6709>\`\uFF0C\u6216 \`oasis spawn --type <\u7C7B\u578B> --title "<\u77ED\u540D>" --brief \u2026\`\uFF08\u4E0D\u7ED9 id\uFF09+ \`oasis link ${p2.id} --to <\u7C7B\u578B>:<\u77ED\u540D>\` \u2192 apply\u3002`,
           `- **required \u4E0A\u6E38\u5DF2\u5E9F\u5F03 / \u51BB\u7ED3\u3001\u7B49\u4E0D\u5230\u4E86** \u2192 \`oasis link ${p2.id} --to <\u5B58\u6D3B\u4E0A\u6E38>\` \u6539\u8FDE\uFF0C\u6216 \`oasis cancel ${p2.id}\`\uFF08\u8F6C\u4EBA\u5BA1\uFF09\u3002`,
           `- **\u67D0 part \u6C38\u4E45\u4EA4\u4ED8\u4E0D\u4E86\u3001\u5361\u6B7B\u6574\u6761\u96C6\u6210** \u2192 \`oasis cancel-part ${p2.id} --part <\u5361\u4F4F\u7684part>\` \u2192 apply\uFF08\u9500\u6BC1\u6027\uFF0C\u8F6C\u4EBA\u5BA1\uFF09\u3002`,
           `- \u62FF\u4E0D\u51C6\u3001\u6216\u6839\u56E0\u4E0D\u5728\u56FE\u4E0A \u2192 \u522B\u52A8\uFF0C\u4E00\u53E5\u8BDD\u8BF4\u6E05\u6839\u56E0 + \u5EFA\u8BAE\u8C01\u5904\u7F6E\uFF0C\u6536\u5DE5\u3002`
@@ -36306,30 +37078,49 @@ var init_worker = __esm({
       }
       /** 唤起一个 bounded 协调者会话跑给定任务（reconcile / 死锁评估共用）。 */
       async runCoordinator(artifactId, task, logMsg) {
-        const prov = this.deps.provision ? await this.deps.provision(COORDINATOR_ACTOR) : void 0;
-        const token = this.deps.tokenFor(COORDINATOR_ACTOR);
+        const resolved = this.deps.resolveCoordinator ? await this.deps.resolveCoordinator() : null;
+        const actorId = this.deps.resolveCoordinator ? resolved?.actor.id : COORDINATOR_ACTOR2;
+        const binding = resolved?.binding;
+        if (!actorId) {
+          this.deps.log?.(`[coordinator] ${logMsg} \u8DF3\u8FC7\uFF1A\u7CFB\u7EDF\u7F3A\u5C11\u540D\u79F0\u5305\u542B\u201C\u534F\u8C03\u8005\u201D\u6216\u201Ccoordinator\u201D\u7684 active \u667A\u80FD\u4F53\uFF0C\u6216\u7F3A\u5C11 active runtime \u7ED1\u5B9A`);
+          return;
+        }
+        const prov = this.deps.provision ? await this.deps.provision(actorId) : void 0;
+        const limits = { wallClockMs: 5 * 6e4 };
+        const ctx = {
+          actor: actorId,
+          artifactId,
+          action: "coordinate",
+          ...binding !== void 0 ? { binding } : {},
+          limits
+        };
+        const token = this.deps.tokenFor(actorId, ctx);
+        const serverUrl = this.deps.serverUrlFor ? await this.deps.serverUrlFor(ctx) : this.deps.serverUrl;
+        const workspace = this.deps.kernel.model.artifacts.get(artifactId)?.workspace;
         const job = {
-          actor: COORDINATOR_ACTOR,
+          actor: actorId,
           actorToken: token,
           artifactId,
           bundle: { files: { "TASK.md": task } },
           systemPrompt: COORDINATOR_SYSTEM_PROMPT,
-          server: { url: this.deps.serverUrl },
-          limits: { wallClockMs: 5 * 6e4 },
+          server: { url: serverUrl },
+          ...binding ? { binding } : {},
+          limits,
           // OASIS_STAGE=1：本会话里 link/spawn/unlink/seal/cancel-part 进编辑缓冲、apply 才提交（react 攒事务）。
-          env: { ...prov?.env ?? {}, OASIS_STAGE: "1" },
+          env: { ...prov?.env ?? {}, OASIS_STAGE: "1", ...workspace ? { OASIS_WORKSPACE: workspace } : {} },
           ...prov?.wrapperPaths && prov.wrapperPaths.length > 0 ? { wrapperPaths: prov.wrapperPaths } : {}
         };
         this.deps.log?.(`[coordinator] ${logMsg}`);
         const handle = await this.deps.adapter.spawn(job);
         await new Promise((resolve3) => handle.onExit(() => resolve3()));
-        await this.finalizeStage(token);
+        void this.finalizeStage(token);
       }
       /** 会话结束兜底：flush 该会话（按 token 隔离）的编辑缓冲；空则 no-op。 */
       async finalizeStage(token) {
         try {
           const res = await fetch(`${this.deps.serverUrl}/api/stage/apply`, {
             method: "POST",
+            signal: AbortSignal.timeout(2e3),
             headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
             body: JSON.stringify({ reason: "\uFF08\u534F\u8C03\u8005\u4F1A\u8BDD\u6536\u5DE5\u81EA\u52A8\u63D0\u4EA4\uFF09" })
           });
@@ -36344,6 +37135,115 @@ var init_worker = __esm({
   }
 });
 
+// ../server/src/governance/build-workorder-skill.ts
+async function bootstrapBuildWorkorderSkill(service) {
+  const SYSTEM = "actor:system:bootstrap";
+  const installed = await service.listInstalledSkills();
+  if (!installed.some((s2) => s2.id === BUILD_WORKORDER_SKILL_ID)) {
+    await service.installCustomSkill(
+      { id: BUILD_WORKORDER_SKILL_ID, name: BUILD_WORKORDER_SKILL_ID, description: DESCRIPTION, source: "custom" },
+      SYSTEM
+    );
+  }
+  await service.putSkillFile(BUILD_WORKORDER_SKILL_ID, "SKILL.md", BUILD_WORKORDER_SKILL_MD);
+}
+var BUILD_WORKORDER_SKILL_ID, DESCRIPTION, BUILD_WORKORDER_SKILL_MD;
+var init_build_workorder_skill = __esm({
+  "../server/src/governance/build-workorder-skill.ts"() {
+    "use strict";
+    BUILD_WORKORDER_SKILL_ID = "build-workorder";
+    DESCRIPTION = "\u628A\u804A\u6E05\u695A\u7684\u9700\u6C42\u843D\u6210\u4E00\u5F20\u5DE5\u5355\uFF08\u534F\u4F5C\u56FE\uFF09\uFF0C\u4EE5\u53CA\u5728\u4EBA\u786E\u8BA4\u524D\u7EE7\u7EED\u6539\u8FD9\u4EFD\u8349\u6848\u3002\u5F53\u7528\u6237\u8981\u5EFA\u5355/\u7ACB\u9879\uFF0C\u6216\u8981\u8C03\u6574\u521A\u751F\u6210\u7684\u5DE5\u5355\u8349\u6848\u65F6\u7528\u672C\u6280\u80FD\uFF1A\u67E5\u91CD oasis workorders \u2192 \u5EFA\u5355 oasis create-workorder \u2192 \u6539\u8349\u6848 oasis spawn/edit/link/cancel\u3002";
+    BUILD_WORKORDER_SKILL_MD = String.raw`---
+name: build-workorder
+description: ${DESCRIPTION}
+---
+
+# 建单：把对话落成一张工单
+
+工单 = 一张以产物为中心的协作图：一个根 ´brief´（工单总规格）+ 若干分解节点（prd/research/design/dev/qa…），节点间连依赖边。你把对话敲定的内容**结构化暂存**成一份草案，人在编辑器里看、确认才真创建。
+
+## 流程
+1. **查重** ´oasis workorders --search <词>´：有没有类似工单在做/做过，别重复立项。
+2. **建单** ´oasis create-workorder …´：暂存**草案**（stage=draft，人确认才真创建），命令**直接打印** workspace（工单 id）+ 各节点 id。
+3. **改草案** ´oasis spawn/edit/link/cancel …´：人确认前，随时调这份草案（加/删/改节点、连边）。
+4. 人在编辑器确认 → 工单创建。**你不用 apply**，确认是人的事。
+
+## 一、查重（建单前必做）
+- ´oasis workorders --search <关键词>´：列/搜工单。命中类似的 → ´oasis workorder <工单id>´ 看详情，已覆盖就别再建、跟用户说明。
+
+## 二、建单
+信息不足、关键决策没定**别硬建**，用文字问用户；一个工单一个目标，多件独立的事拆成多张。
+
+´´´bash
+oasis create-workorder \
+  --type <工单主产物类型，如 prd；根 brief 自动建> \
+  --title "工单名，名词短语，≤20字" \
+  --goal "一句话目标，≤50字" \
+  --brief "完整规格(markdown)：背景、关键决策、约束、范围、不做什么" \
+  --acceptance '["逐条可判定的验收条件","没聊到给 []"]' \
+  --plan '<节点分解 JSON，见下>'
+´´´
+**不用填 workspace——系统自动生成工单 id。** 命令**直接打印 workspace（工单 id）和每个节点的 id**，记住它们、改草案要用——**不必再去 query**。它产出的是**草案**（stage=draft）：人在编辑器确认才真创建，你别拿它当活工单使。
+
+### --plan 结构
+´´´json
+{
+  "nodes": [
+    { "type": "节点类型", "title": "≤20字，同 type 内唯一",
+      "dependsOn": ["上游节点写 type:title，如 prd:需求；无上游写 []"],
+      "brief": "这个节点具体要产出什么的规格，别套模板、别只写类型名" }
+  ],
+  "notes": ["可选：分解理由/缺口；没有给 []"]
+}
+´´´
+
+## 三、改草案（人确认前随时改）
+建单后草案在编辑器里等人确认。用户要调整就用下面的命令改这份草案（**改完即时生效、人在编辑器里能看到**，你不用 apply）：
+
+**节点引用 = id 或 type:title，分清：**
+- **填完整 id**（´oasis workorder´ / create 返回的，如 ´artifact:prd:x7k2-需求´）→ **不用带 workspace**。推荐。
+- **填 type:title**（简写，如 ´prd:需求´）→ **必须加 ´--workspace <工单id>´**（create 返回的那个）。
+- ´spawn´ 是新建节点、没有现成 id → **一律带 ´--workspace´**。
+
+´´´bash
+# 加节点（带 workspace；--input 上游可用 type:title）
+oasis spawn --type qa --title 验收用例 --brief "覆盖登录成功/失败" --input dev:实现 --workspace ws:wo-x7k2
+# 改节点标题/规格（用 id，免 workspace）
+oasis edit artifact:prd:x7k2-需求 --title "需求与范围"
+# 连边：消费者依赖上游
+oasis link artifact:qa:x7k2-验收 --to artifact:dev:x7k2-实现
+# 删节点（从草案删掉，连它的边一起摘）
+oasis cancel prd:需求 --workspace ws:wo-x7k2
+´´´
+
+# 命令参考
+
+## 查询
+- ´oasis workorders [--search <词>]´ —— 列/搜工单（id/名/阶段/进度）。无参列全部；´--search´ 端侧过滤。
+- ´oasis workorder <工单id>´ —— 工单详情：**stage**（draft 草案 / executing 进行中 / review 评审 / blocked 卡住 / concluded 已完成 / sealed 已封存）+ 目标/验收 + 节点（id/type）+ 依赖边。**刚建的草案这里 ´stage=draft´、也查得到（含各节点 id）**；真查不到才报不存在。
+- ´oasis artifact-types list | search <词> | show <type>´ —— 看可用节点类型（´show´ 看该类型可填的自定义字段）。
+- ´oasis projects [--search <词>]´ —— 列/搜项目（建单 ´--project´ 用）。
+
+## 建单
+- ´oasis create-workorder --type <t> --title <s> [--goal <s>] [--brief <s>] [--acceptance '<json string[]>'] [--plan '<json>'] [--project <id>]´
+  暂存建单草案。´--type´=主产物类型（必填，根 brief 自动建）；´--title´ 必填。**不填 workspace（系统生成）**。返回 ´workspace´ + 各节点 ´id´。
+
+## 改草案（引用 id 不带 workspace；引用 type:title 或 spawn 带 ´--workspace <工单id>´）
+- ´oasis spawn --type <t> --title <s> [--brief <s>] [--input <ref>,<ref>…] --workspace <工单id>´ —— 加节点，id 据 (type,title) 自动派生。´--type´/´--title´ 必填，title 同 type 唯一；´--input´=上游依赖（逗号分隔）。
+- ´oasis edit <ref> [--title <s>] [--brief <s>]´ —— 改节点标题/规格。
+- ´oasis link <consumer-ref> --to <upstream-ref> [--required true]´ —— 加依赖边。´--required true´=阻塞性（上游没完成下游动不了），省=软依赖。
+- ´oasis unlink <consumer-ref> --to <upstream-ref>´ —— 删依赖边。
+- ´oasis cancel <ref> [--note <s>]´ —— 从草案删节点（连它的边一起摘）。
+
+## 规则
+- **节点类型**：先 ´oasis artifact-types list/search/show´ 挑最贴合的；都不贴合用 ´oasis artifact-types add <name> --content-type <text|code|…> --owner-role <角色>´ 新建再用。常见：prd、research、design、adr、dev、qa。
+- **title**：≤20字、同 type 内唯一、别用半角冒号 ´:´（与 type:title 分隔冲突，要冒号用全角 ´：´）。一个工单可多个同 type 节点，靠 title 区分。
+- **项目**：归某项目就 ´oasis projects --search <词>´ 找 id 再加 ´--project´。
+- **边界**：你只管图的结构与规格，不替用户拍产品决策——拿不准就问。改**已建好的活工单**是协调者的活，不在本技能范围。
+`.replace(/´/g, "`");
+  }
+});
+
 // ../server/src/index.ts
 var init_src4 = __esm({
   "../server/src/index.ts"() {
@@ -36379,9 +37279,11 @@ var init_src4 = __esm({
     init_integrate();
     init_sync();
     init_resolve();
+    init_identity();
     init_worker();
     init_drafts();
     init_workorder_drafts();
+    init_build_workorder_skill();
   }
 });
 
@@ -37973,15 +38875,15 @@ var require_pg_connection_string = __commonJS({
       if (config2.sslcert || config2.sslkey || config2.sslrootcert || config2.sslmode) {
         config2.ssl = {};
       }
-      const fs16 = config2.sslcert || config2.sslkey || config2.sslrootcert ? require("fs") : null;
+      const fs17 = config2.sslcert || config2.sslkey || config2.sslrootcert ? require("fs") : null;
       if (config2.sslcert) {
-        config2.ssl.cert = fs16.readFileSync(config2.sslcert).toString();
+        config2.ssl.cert = fs17.readFileSync(config2.sslcert).toString();
       }
       if (config2.sslkey) {
-        config2.ssl.key = fs16.readFileSync(config2.sslkey).toString();
+        config2.ssl.key = fs17.readFileSync(config2.sslkey).toString();
       }
       if (config2.sslrootcert) {
-        config2.ssl.ca = fs16.readFileSync(config2.sslrootcert).toString();
+        config2.ssl.ca = fs17.readFileSync(config2.sslrootcert).toString();
       }
       if (options.useLibpqCompat && config2.uselibpqcompat) {
         throw new Error("Both useLibpqCompat and uselibpqcompat are set. Please use only one of them.");
@@ -39918,15 +40820,15 @@ var require_lib = __commonJS({
   "../../node_modules/.pnpm/pgpass@1.0.5/node_modules/pgpass/lib/index.js"(exports2, module2) {
     "use strict";
     var path14 = require("path");
-    var fs16 = require("fs");
+    var fs17 = require("fs");
     var helper = require_helper();
     module2.exports = function(connInfo, cb) {
       var file = helper.getFileName();
-      fs16.stat(file, function(err, stat) {
+      fs17.stat(file, function(err, stat) {
         if (err || !helper.usePgPass(stat, file)) {
           return cb(void 0);
         }
-        var st = fs16.createReadStream(file);
+        var st = fs17.createReadStream(file);
         helper.getPassword(connInfo, st, cb);
       });
     };
@@ -41480,37 +42382,37 @@ __export(trajectory_exports, {
 });
 async function exportTrajectories(dataDir) {
   const root = path10.join(dataDir, "trajectories");
-  if (!fs12.existsSync(root)) return [];
+  if (!fs13.existsSync(root)) return [];
   const model = emptyReadModel();
   const oplogFile = path10.join(dataDir, "oplog.ndjson");
-  if (fs12.existsSync(oplogFile)) {
+  if (fs13.existsSync(oplogFile)) {
     const oplog = await NdjsonOplogStore.open(oplogFile);
     for await (const entry of oplog.readAll()) fold(model, entry.op);
   }
   const samples = [];
-  for (const sessionId of fs12.readdirSync(root).sort()) {
+  for (const sessionId of fs13.readdirSync(root).sort()) {
     const dir = path10.join(root, sessionId);
     const sessionFile = path10.join(dir, "session.json");
-    if (!fs12.existsSync(sessionFile)) continue;
-    const session = JSON.parse(fs12.readFileSync(sessionFile, "utf8"));
+    if (!fs13.existsSync(sessionFile)) continue;
+    const session = JSON.parse(fs13.readFileSync(sessionFile, "utf8"));
     const events = [];
     const eventsFile = path10.join(dir, "events.ndjson");
-    if (fs12.existsSync(eventsFile)) {
-      for (const line of fs12.readFileSync(eventsFile, "utf8").split("\n")) {
+    if (fs13.existsSync(eventsFile)) {
+      for (const line of fs13.readFileSync(eventsFile, "utf8").split("\n")) {
         if (line.trim()) events.push(JSON.parse(line));
       }
     }
     const bundle = {};
     const bundleDir = path10.join(dir, "bundle");
     const walk = (sub) => {
-      for (const name of fs12.readdirSync(path10.join(bundleDir, sub))) {
+      for (const name of fs13.readdirSync(path10.join(bundleDir, sub))) {
         const rel = sub ? `${sub}/${name}` : name;
         const full = path10.join(bundleDir, rel);
-        if (fs12.statSync(full).isDirectory()) walk(rel);
-        else bundle[rel] = fs12.readFileSync(full, "utf8");
+        if (fs13.statSync(full).isDirectory()) walk(rel);
+        else bundle[rel] = fs13.readFileSync(full, "utf8");
       }
     };
-    if (fs12.existsSync(bundleDir)) walk("");
+    if (fs13.existsSync(bundleDir)) walk("");
     const proposed = (session.opRefs ?? []).filter((r) => r.kind === "propose_revision").map((r) => r.target);
     const verdicts = proposed.flatMap(
       (rev) => (model.reviews.get(rev) ?? []).map((v2) => ({ author: v2.author, verdict: v2.verdict, ...v2.note !== void 0 ? { note: v2.note } : {} }))
@@ -41522,11 +42424,11 @@ async function exportTrajectories(dataDir) {
   }
   return samples;
 }
-var fs12, path10, FsTrajectorySink;
+var fs13, path10, FsTrajectorySink;
 var init_trajectory = __esm({
   "../cli/src/trajectory.ts"() {
     "use strict";
-    fs12 = __toESM(require("node:fs"), 1);
+    fs13 = __toESM(require("node:fs"), 1);
     path10 = __toESM(require("node:path"), 1);
     init_src2();
     init_src4();
@@ -41541,25 +42443,25 @@ var init_trajectory = __esm({
       }
       begin(session, bundleFiles) {
         const dir = this.dir(session.sessionId);
-        fs12.mkdirSync(path10.join(dir, "bundle"), { recursive: true });
-        fs12.writeFileSync(path10.join(dir, "session.json"), JSON.stringify(session, null, 2));
+        fs13.mkdirSync(path10.join(dir, "bundle"), { recursive: true });
+        fs13.writeFileSync(path10.join(dir, "session.json"), JSON.stringify(session, null, 2));
         for (const [rel, content] of Object.entries(bundleFiles)) {
           const file = path10.join(dir, "bundle", rel);
-          fs12.mkdirSync(path10.dirname(file), { recursive: true });
-          fs12.writeFileSync(file, content);
+          fs13.mkdirSync(path10.dirname(file), { recursive: true });
+          fs13.writeFileSync(file, content);
         }
         this.broadcast?.({ type: "begin", sessionId: session.sessionId, data: session });
       }
       event(sessionId, event) {
-        fs12.appendFileSync(path10.join(this.dir(sessionId), "events.ndjson"), JSON.stringify(event) + "\n");
+        fs13.appendFileSync(path10.join(this.dir(sessionId), "events.ndjson"), JSON.stringify(event) + "\n");
         this.broadcast?.({ type: "event", sessionId, data: event });
       }
       end(sessionId, update) {
         const file = path10.join(this.dir(sessionId), "session.json");
-        const session = JSON.parse(fs12.readFileSync(file, "utf8"));
+        const session = JSON.parse(fs13.readFileSync(file, "utf8"));
         session.exit = update.exit;
         session.opRefs = update.opRefs;
-        fs12.writeFileSync(file, JSON.stringify(session, null, 2));
+        fs13.writeFileSync(file, JSON.stringify(session, null, 2));
         this.broadcast?.({ type: "end", sessionId, data: session });
       }
     };
@@ -41567,19 +42469,19 @@ var init_trajectory = __esm({
 });
 
 // src/index.ts
-var fs15 = __toESM(require("node:fs"));
+var fs16 = __toESM(require("node:fs"));
 var os8 = __toESM(require("node:os"));
 var path13 = __toESM(require("node:path"));
 var import_node_child_process10 = require("node:child_process");
 
 // ../cli/src/cli.ts
-var fs14 = __toESM(require("node:fs"), 1);
+var fs15 = __toESM(require("node:fs"), 1);
 var os7 = __toESM(require("node:os"), 1);
 var path12 = __toESM(require("node:path"), 1);
 var import_node_crypto21 = require("node:crypto");
 
 // ../cli/src/serve.ts
-var fs13 = __toESM(require("node:fs"), 1);
+var fs14 = __toESM(require("node:fs"), 1);
 var os6 = __toESM(require("node:os"), 1);
 var path11 = __toESM(require("node:path"), 1);
 var import_node_crypto20 = require("node:crypto");
@@ -41788,7 +42690,7 @@ var import_node_path3 = require("node:path");
 // ../adapters/src/claude-code/index.ts
 var import_node_child_process5 = require("node:child_process");
 var import_node_crypto14 = require("node:crypto");
-var fs8 = __toESM(require("node:fs"), 1);
+var fs9 = __toESM(require("node:fs"), 1);
 var os2 = __toESM(require("node:os"), 1);
 var path6 = __toESM(require("node:path"), 1);
 var readline = __toESM(require("node:readline"), 1);
@@ -41909,12 +42811,17 @@ var ClaudeCodeAdapter = class {
   async spawn(job) {
     const slug4 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
     const id = `claude-${slug4}-${(0, import_node_crypto14.randomUUID)().slice(0, 8)}`;
-    const dir = job.runtimeSessionId ? path6.join(this.opts.workRoot ?? os2.tmpdir(), "oasis-chat-sessions", job.runtimeSessionId.replace(/[^a-zA-Z0-9_-]+/g, "_")) : fs8.mkdtempSync(path6.join(this.opts.workRoot ?? os2.tmpdir(), "oasis-session-"));
-    fs8.mkdirSync(dir, { recursive: true });
+    const dir = job.runtimeSessionId ? path6.join(this.opts.workRoot ?? os2.tmpdir(), "oasis-chat-sessions", job.runtimeSessionId.replace(/[^a-zA-Z0-9_-]+/g, "_")) : fs9.mkdtempSync(path6.join(this.opts.workRoot ?? os2.tmpdir(), "oasis-session-"));
+    fs9.mkdirSync(dir, { recursive: true });
     for (const [rel, content] of Object.entries(job.bundle.files)) {
       const file = path6.join(dir, rel);
-      fs8.mkdirSync(path6.dirname(file), { recursive: true });
-      fs8.writeFileSync(file, content);
+      fs9.mkdirSync(path6.dirname(file), { recursive: true });
+      fs9.writeFileSync(file, content);
+    }
+    for (const [rel, b64] of Object.entries(job.bundle.binaryFiles ?? {})) {
+      const file = path6.join(dir, rel);
+      fs9.mkdirSync(path6.dirname(file), { recursive: true });
+      fs9.writeFileSync(file, Buffer.from(b64, "base64"));
     }
     const prompt = job.bundle.files["TASK.md"];
     if (!prompt) throw new Error("bundle \u7F3A TASK.md\uFF08\u88C5\u914D\u5668\u5951\u7EA6\uFF09");
@@ -41953,7 +42860,7 @@ var ClaudeCodeAdapter = class {
       stdio: ["ignore", "pipe", "pipe"]
     });
     let transcriptRef = path6.join(dir, "transcript.txt");
-    const out = fs8.createWriteStream(transcriptRef);
+    const out = fs9.createWriteStream(transcriptRef);
     const telemetryCbs = [];
     let eventSeq = 0;
     let lastResult;
@@ -42016,13 +42923,13 @@ var ClaudeCodeAdapter = class {
       if (this.opts.cleanupWorkdir && !job.runtimeSessionId) {
         try {
           const keepDir = path6.join(this.opts.workRoot ?? os2.tmpdir(), "oasis-transcripts");
-          fs8.mkdirSync(keepDir, { recursive: true });
+          fs9.mkdirSync(keepDir, { recursive: true });
           const kept = path6.join(keepDir, `${id}.txt`);
           const src = transcriptRef;
           out.end(() => {
             try {
-              fs8.renameSync(src, kept);
-              fs8.rmSync(dir, { recursive: true, force: true });
+              fs9.renameSync(src, kept);
+              fs9.rmSync(dir, { recursive: true, force: true });
             } catch {
             }
           });
@@ -42057,7 +42964,7 @@ var ClaudeCodeAdapter = class {
 // ../adapters/src/codex/index.ts
 var import_node_child_process6 = require("node:child_process");
 var import_node_crypto15 = require("node:crypto");
-var fs9 = __toESM(require("node:fs"), 1);
+var fs10 = __toESM(require("node:fs"), 1);
 var os3 = __toESM(require("node:os"), 1);
 var path7 = __toESM(require("node:path"), 1);
 var readline2 = __toESM(require("node:readline"), 1);
@@ -42102,7 +43009,7 @@ function codexSessionsRoot() {
   if (home) candidates.push(path7.join(home, ".codex", "sessions"));
   for (const c of candidates) {
     try {
-      if (fs9.statSync(c).isDirectory()) return c;
+      if (fs10.statSync(c).isDirectory()) return c;
     } catch {
     }
   }
@@ -42114,7 +43021,7 @@ function listRecentRollouts(root, sinceMs) {
   const walk = (d) => {
     let ents;
     try {
-      ents = fs9.readdirSync(d, { withFileTypes: true });
+      ents = fs10.readdirSync(d, { withFileTypes: true });
     } catch {
       return;
     }
@@ -42124,7 +43031,7 @@ function listRecentRollouts(root, sinceMs) {
       else if (ent.isFile() && ent.name.startsWith("rollout-") && ent.name.endsWith(".jsonl")) {
         let m2 = 0;
         try {
-          m2 = fs9.statSync(p2).mtimeMs;
+          m2 = fs10.statSync(p2).mtimeMs;
         } catch {
         }
         if (m2 >= margin) found.push({ f: p2, m: m2 });
@@ -42139,7 +43046,7 @@ function scanCodexUsage(workdir, sinceMs, sessionsRoot = codexSessionsRoot()) {
     for (const f2 of listRecentRollouts(sessionsRoot, sinceMs)) {
       let lines;
       try {
-        lines = fs9.readFileSync(f2, "utf8").split("\n");
+        lines = fs10.readFileSync(f2, "utf8").split("\n");
       } catch {
         continue;
       }
@@ -42163,9 +43070,9 @@ function createCodexNormalizeState() {
 function record2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
-function textOf2(value) {
+function textOf3(value) {
   if (typeof value === "string") return value;
-  if (Array.isArray(value)) return value.map(textOf2).filter(Boolean).join("\n");
+  if (Array.isArray(value)) return value.map(textOf3).filter(Boolean).join("\n");
   const obj = record2(value);
   if (!obj) return void 0;
   if (typeof obj.text === "string") return obj.text;
@@ -42174,7 +43081,7 @@ function textOf2(value) {
   return void 0;
 }
 function stringifyContent(value) {
-  const text = textOf2(value);
+  const text = textOf3(value);
   if (text !== void 0) return text;
   if (value === void 0 || value === null) return "";
   try {
@@ -42205,7 +43112,7 @@ ${text}` : text;
     return [{ kind: "message", payload: { text: delta }, outputText: delta }];
   }
   if (type === "reasoning") {
-    const text = textOf2(item.text ?? item.summary ?? item.content ?? item);
+    const text = textOf3(item.text ?? item.summary ?? item.content ?? item);
     return text ? [{ kind: "thought", payload: { text } }] : [];
   }
   if (type === "command_execution" && typeof item.id === "string") {
@@ -42331,11 +43238,11 @@ var CodexAdapter = class {
     const slug4 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
     const id = `codex-${slug4}-${(0, import_node_crypto15.randomUUID)().slice(0, 8)}`;
     const startedAtMs = Date.now();
-    const dir = fs9.mkdtempSync(path7.join(this.opts.workRoot ?? os3.tmpdir(), "oasis-session-"));
+    const dir = fs10.mkdtempSync(path7.join(this.opts.workRoot ?? os3.tmpdir(), "oasis-session-"));
     for (const [rel, content] of Object.entries(job.bundle.files)) {
       const file = path7.join(dir, rel);
-      fs9.mkdirSync(path7.dirname(file), { recursive: true });
-      fs9.writeFileSync(file, content);
+      fs10.mkdirSync(path7.dirname(file), { recursive: true });
+      fs10.writeFileSync(file, content);
     }
     const task = job.bundle.files["TASK.md"];
     if (!task) throw new Error("bundle \u7F3A TASK.md\uFF08\u88C5\u914D\u5668\u5951\u7EA6\uFF09");
@@ -42367,7 +43274,7 @@ var CodexAdapter = class {
       stdio: ["ignore", "pipe", "pipe"]
     });
     let transcriptRef = path7.join(dir, "transcript.txt");
-    const out = fs9.createWriteStream(transcriptRef);
+    const out = fs10.createWriteStream(transcriptRef);
     const outputCbs = [];
     const telemetryCbs = [];
     const normalizeState = createCodexNormalizeState();
@@ -42398,13 +43305,13 @@ var CodexAdapter = class {
       if (this.opts.cleanupWorkdir) {
         try {
           const keepDir = path7.join(this.opts.workRoot ?? os3.tmpdir(), "oasis-transcripts");
-          fs9.mkdirSync(keepDir, { recursive: true });
+          fs10.mkdirSync(keepDir, { recursive: true });
           const kept = path7.join(keepDir, `${id}.txt`);
           const src = transcriptRef;
           out.end(() => {
             try {
-              fs9.renameSync(src, kept);
-              fs9.rmSync(dir, { recursive: true, force: true });
+              fs10.renameSync(src, kept);
+              fs10.rmSync(dir, { recursive: true, force: true });
             } catch {
             }
           });
@@ -42457,7 +43364,7 @@ var CodexAdapter = class {
 // ../adapters/src/_core/acp.ts
 var import_node_child_process7 = require("node:child_process");
 var import_node_crypto16 = require("node:crypto");
-var fs10 = __toESM(require("node:fs"), 1);
+var fs11 = __toESM(require("node:fs"), 1);
 var os4 = __toESM(require("node:os"), 1);
 var path8 = __toESM(require("node:path"), 1);
 var readline3 = __toESM(require("node:readline"), 1);
@@ -42472,6 +43379,7 @@ var ACPClient = class {
   nextId = 0;
   pending = /* @__PURE__ */ new Map();
   pendingTools = /* @__PURE__ */ new Map();
+  textBuffers = /* @__PURE__ */ new Map();
   seq = 0;
   request(method, params) {
     const id = this.nextId++;
@@ -42481,6 +43389,7 @@ var ACPClient = class {
     });
   }
   closeAllPending(err) {
+    this.flushTextBuffers();
     for (const p2 of this.pending.values()) p2.reject(err);
     this.pending.clear();
   }
@@ -42539,17 +43448,22 @@ var ACPClient = class {
         this.handleAgentThought(updateData);
         break;
       case "tool_call":
+        this.flushTextBuffers();
         this.handleToolCallStart(updateData);
+        this.handleToolCallUpdate(updateData);
         break;
       case "tool_call_update":
+        this.flushTextBuffers();
         this.handleToolCallUpdate(updateData);
         break;
       case "turn_end":
+        this.flushTextBuffers();
         this.extractStopReason(updateData);
         break;
     }
   }
   extractStopReason(data) {
+    this.flushTextBuffers();
     const r = data;
     if (r?.stopReason) this.onStop(r.stopReason);
   }
@@ -42557,45 +43471,235 @@ var ACPClient = class {
     if (outputText) this.onOutput(outputText);
     this.onTelemetry({ kind, payload, seq: ++this.seq, ts: (/* @__PURE__ */ new Date()).toISOString() });
   }
+  appendText(kind, text) {
+    if (kind === "message") this.onOutput(text);
+    const other = kind === "message" ? "thought" : "message";
+    this.flushTextBuffer(other);
+    const existing = this.textBuffers.get(kind);
+    if (existing) existing.text += text;
+    else this.textBuffers.set(kind, { text, startedAt: (/* @__PURE__ */ new Date()).toISOString() });
+  }
+  flushTextBuffer(kind) {
+    const buffered = this.textBuffers.get(kind);
+    if (!buffered) return;
+    this.textBuffers.delete(kind);
+    const text = buffered.text;
+    if (!text) return;
+    this.onTelemetry({ kind, payload: { text }, seq: ++this.seq, ts: buffered.startedAt });
+  }
+  flushTextBuffers() {
+    this.flushTextBuffer("thought");
+    this.flushTextBuffer("message");
+  }
   handleAgentMessage(data) {
-    const text = data?.content?.text;
-    if (text) this.emit("message", { text }, text);
+    const text = textFromUnknown(record3(data)?.["content"] ?? data);
+    if (text) this.appendText("message", text);
   }
   handleAgentThought(data) {
-    const text = data?.content?.text;
-    if (text) this.emit("thought", { text });
+    const text = textFromUnknown(record3(data)?.["content"] ?? data);
+    if (text) this.appendText("thought", text);
   }
   handleToolCallStart(data) {
-    const d = data;
-    if (!d?.toolCallId) return;
-    const toolName = toolNameFromTitle(d.title ?? "", d.kind ?? "");
-    const rawInput = d.rawInput ?? d.input;
-    if (rawInput) {
-      this.pendingTools.set(d.toolCallId, { toolName, input: rawInput, argsText: "", emitted: true });
-      this.emit("tool_use", { id: d.toolCallId, name: toolName, input: rawInput });
+    const d = toolPayload(data);
+    const toolCallId = toolCallIdOf(d);
+    if (!toolCallId) return;
+    const toolName = toolNameOf(d);
+    const input = toolInputOf(d);
+    if (input !== void 0) {
+      this.pendingTools.set(toolCallId, { toolName, input, argsText: "", outputParts: [], emitted: true });
+      this.emit("tool_use", { id: toolCallId, name: toolName, input });
     } else {
-      this.pendingTools.set(d.toolCallId, { toolName, argsText: "", emitted: false });
+      this.pendingTools.set(toolCallId, {
+        toolName,
+        argsText: argsTextOf(d) ?? "",
+        outputParts: [],
+        emitted: false
+      });
     }
   }
   handleToolCallUpdate(data) {
-    const d = data;
-    if (!d?.toolCallId) return;
-    const status = d.status;
-    if (status !== "completed" && status !== "failed") return;
-    const pending = this.pendingTools.get(d.toolCallId);
-    this.pendingTools.delete(d.toolCallId);
+    const d = toolPayload(data);
+    const toolCallId = toolCallIdOf(d);
+    if (!toolCallId) return;
+    let pending = this.pendingTools.get(toolCallId);
+    if (!pending) {
+      pending = {
+        toolName: toolNameOf(d),
+        input: toolInputOf(d),
+        argsText: argsTextOf(d) ?? "",
+        outputParts: [],
+        emitted: false
+      };
+      this.pendingTools.set(toolCallId, pending);
+    }
+    const input = toolInputOf(d);
+    if (input !== void 0) pending.input = input;
+    const argsText = argsTextOf(d);
+    if (argsText) pending.argsText += argsText;
+    const output = toolOutputOf(d);
+    if (output !== void 0) pending.outputParts.push(output);
+    if (!pending.emitted && pending.input !== void 0) {
+      pending.emitted = true;
+      this.emit("tool_use", { id: toolCallId, name: pending.toolName, input: pending.input });
+    }
+    const status = statusOf(d);
+    if (!isFinalToolStatus(status, d)) return;
+    this.pendingTools.delete(toolCallId);
     if (!pending?.emitted) {
-      const toolName = pending?.toolName ?? toolNameFromTitle(d.title ?? "", d.kind ?? "");
-      const input = pending?.input ?? parseArgsJSON(pending?.argsText ?? "");
-      this.emit("tool_use", { id: d.toolCallId, name: toolName, input });
+      const input2 = pending.input ?? parseArgsJSON(pending.argsText);
+      this.emit("tool_use", { id: toolCallId, name: pending.toolName, input: input2 ?? {} });
     }
     this.emit("tool_result", {
-      tool_use_id: d.toolCallId,
-      content: d.rawOutput ?? d.output ?? "",
-      is_error: status === "failed"
+      tool_use_id: toolCallId,
+      content: output ?? joinOutputParts(pending.outputParts),
+      is_error: isErrorToolStatus(status, d)
     });
   }
 };
+function record3(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function firstString(...values) {
+  for (const value of values) {
+    if (typeof value === "string" && value.trim()) return value;
+  }
+  return void 0;
+}
+function textFromUnknown(value) {
+  if (typeof value === "string") return value;
+  if (Array.isArray(value)) {
+    const parts = value.map(textFromUnknown).filter((x2) => Boolean(x2));
+    return parts.length ? parts.join("") : void 0;
+  }
+  const obj = record3(value);
+  if (!obj) return void 0;
+  const direct = firstString(obj["text"], obj["delta"], obj["message"], record3(obj["error"])?.["message"]);
+  if (direct) return direct;
+  return textFromUnknown(obj["content"]) ?? textFromUnknown(record3(obj["result"])?.["content"]) ?? textFromUnknown(obj["result"]);
+}
+function jsonLike(value) {
+  if (typeof value !== "string") return value;
+  const t = value.trim();
+  if (!t) return void 0;
+  if (t.startsWith("{") && t.endsWith("}") || t.startsWith("[") && t.endsWith("]")) {
+    try {
+      return JSON.parse(t);
+    } catch {
+    }
+  }
+  return { text: value };
+}
+function toolPayload(data) {
+  const d = record3(data) ?? {};
+  const nested = record3(d["toolCall"]) ?? record3(d["tool_call"]) ?? record3(d["call"]) ?? record3(d["tool"]) ?? record3(d["data"]) ?? {};
+  return { ...nested, ...d };
+}
+function toolCallIdOf(d) {
+  return firstString(d["toolCallId"], d["tool_call_id"], d["callId"], d["call_id"], d["id"]);
+}
+function toolNameOf(d) {
+  return firstString(d["name"], d["toolName"], d["tool_name"], record3(d["tool"])?.["name"]) ?? toolNameFromTitle(firstString(d["title"]) ?? "", firstString(d["kind"]) ?? "");
+}
+function inputFromTitle(title, toolName) {
+  const colon = title.indexOf(":");
+  if (colon < 0) return void 0;
+  const tail = title.slice(colon + 1).trim();
+  if (!tail) return void 0;
+  if (toolName === "terminal" || toolName === "execute_code" || toolName === "python") return { command: tail };
+  if (toolName.includes("read") || toolName.includes("write")) return { path: tail };
+  if (toolName.includes("search")) return { query: tail };
+  return { text: tail };
+}
+function toolInputOf(d) {
+  const direct = d["rawInput"] ?? d["raw_input"] ?? d["input"] ?? d["arguments"] ?? d["args"] ?? d["parameters"] ?? d["params"];
+  const parsed = jsonLike(direct);
+  if (parsed !== void 0) return parsed;
+  const command = firstString(d["command"], d["cmd"]);
+  if (command) return { command };
+  const common = compactRecord({
+    query: d["query"] ?? d["q"] ?? d["searchQuery"] ?? d["search_query"],
+    queries: d["queries"],
+    url: d["url"] ?? d["uri"],
+    urls: d["urls"],
+    path: d["path"] ?? d["filePath"] ?? d["file_path"],
+    paths: d["paths"],
+    pattern: d["pattern"] ?? d["regex"],
+    prompt: d["prompt"],
+    description: d["description"]
+  });
+  if (common) return common;
+  const fromTitle = inputFromTitle(firstString(d["title"]) ?? "", toolNameOf(d));
+  const locations = locationsOf(d);
+  if (fromTitle && locations) return { ...fromTitle, locations };
+  if (fromTitle) return fromTitle;
+  if (locations) return { locations };
+  return void 0;
+}
+function argsTextOf(d) {
+  const value = d["argsText"] ?? d["args_text"] ?? d["argumentsText"] ?? d["arguments_text"];
+  return typeof value === "string" ? value : void 0;
+}
+function toolOutputOf(d) {
+  const error2 = record3(d["error"]);
+  if (error2) return error2["message"] ?? error2;
+  const raw = d["rawOutput"] ?? d["raw_output"] ?? d["output"] ?? d["result"] ?? d["results"] ?? d["response"] ?? d["data"] ?? d["content"];
+  const stream = compactRecord({
+    stdout: d["stdout"],
+    stderr: d["stderr"],
+    exit_code: d["exit_code"] ?? d["exitCode"]
+  });
+  if (raw === void 0) return stream;
+  const text = textFromUnknown(raw);
+  const primary = text ?? raw;
+  if (stream && typeof primary === "string" && primary.trim()) return { output: primary, ...stream };
+  return stream ?? primary;
+}
+function compactRecord(input) {
+  const out = {};
+  for (const [key, value] of Object.entries(input)) {
+    if (value === void 0 || value === null) continue;
+    if (typeof value === "string" && !value.trim()) continue;
+    if (Array.isArray(value) && value.length === 0) continue;
+    out[key] = parseJsonString(value);
+  }
+  return Object.keys(out).length ? out : void 0;
+}
+function parseJsonString(value) {
+  if (typeof value !== "string") return value;
+  const t = value.trim();
+  if (t.startsWith("{") && t.endsWith("}") || t.startsWith("[") && t.endsWith("]")) {
+    try {
+      return JSON.parse(t);
+    } catch {
+    }
+  }
+  return value;
+}
+function locationsOf(d) {
+  const locations = d["locations"];
+  if (!Array.isArray(locations)) return void 0;
+  const out = locations.filter((item) => Boolean(record3(item)));
+  return out.length ? out : void 0;
+}
+function statusOf(d) {
+  const status = firstString(d["status"], d["state"]);
+  if (status) return status.toLowerCase();
+  if (d["success"] === true) return "succeeded";
+  if (d["success"] === false || d["isError"] === true || d["is_error"] === true || d["error"]) return "failed";
+  return void 0;
+}
+function isFinalToolStatus(status, d) {
+  if (d["done"] === true || d["final"] === true) return true;
+  return status === "completed" || status === "complete" || status === "succeeded" || status === "success" || status === "failed" || status === "error" || status === "cancelled" || status === "canceled" || status === "done" || status === "finished";
+}
+function isErrorToolStatus(status, d) {
+  return status === "failed" || status === "error" || status === "cancelled" || status === "canceled" || d["success"] === false || d["isError"] === true || d["is_error"] === true || Boolean(d["error"]);
+}
+function joinOutputParts(parts) {
+  if (parts.length === 0) return "";
+  if (parts.every((p2) => typeof p2 === "string")) return parts.join("");
+  return parts;
+}
 function normalizeACPUpdate(data) {
   const d = data;
   if (!d) return ["", data];
@@ -42613,7 +43717,17 @@ function normalizeUpdateType(t) {
     agentmessagechunk: "agent_message_chunk",
     agentthoughtchunk: "agent_thought_chunk",
     toolcall: "tool_call",
+    toolcallstart: "tool_call",
+    toolcallstarted: "tool_call",
+    toolcallbegin: "tool_call",
+    toolcallcreated: "tool_call",
     toolcallupdate: "tool_call_update",
+    toolcallupdated: "tool_call_update",
+    toolcallprogress: "tool_call_update",
+    toolcallstatus: "tool_call_update",
+    toolcalldelta: "tool_call_update",
+    toolcallfinished: "tool_call_update",
+    toolcallcompleted: "tool_call_update",
     usageupdate: "usage_update",
     turnend: "turn_end",
     endturn: "turn_end"
@@ -42663,11 +43777,11 @@ async function runACPSession(job, cfg) {
   const slug4 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
   const binTag = path8.basename(cfg.bin).replace(/[^a-zA-Z0-9]/g, "").slice(0, 12) || "acp";
   const id = `${binTag}-${slug4}-${(0, import_node_crypto16.randomUUID)().slice(0, 8)}`;
-  const dir = fs10.mkdtempSync(path8.join(cfg.workRoot ?? os4.tmpdir(), "oasis-session-"));
+  const dir = fs11.mkdtempSync(path8.join(cfg.workRoot ?? os4.tmpdir(), "oasis-session-"));
   for (const [rel, content] of Object.entries(job.bundle.files)) {
     const file = path8.join(dir, rel);
-    fs10.mkdirSync(path8.dirname(file), { recursive: true });
-    fs10.writeFileSync(file, content);
+    fs11.mkdirSync(path8.dirname(file), { recursive: true });
+    fs11.writeFileSync(file, content);
   }
   const task = job.bundle.files["TASK.md"];
   if (!task) throw new Error("bundle \u7F3A TASK.md\uFF08\u88C5\u914D\u5668\u5951\u7EA6\uFF09");
@@ -42685,7 +43799,7 @@ async function runACPSession(job, cfg) {
     stdio: ["pipe", "pipe", "pipe"]
   });
   let transcriptRef = path8.join(dir, "transcript.txt");
-  const transcriptOut = fs10.createWriteStream(transcriptRef);
+  const transcriptOut = fs11.createWriteStream(transcriptRef);
   const outputCbs = [];
   const telemetryCbs = [];
   const exitCbs = [];
@@ -42696,13 +43810,13 @@ async function runACPSession(job, cfg) {
     if (cfg.cleanupWorkdir) {
       try {
         const keepDir = path8.join(cfg.workRoot ?? os4.tmpdir(), "oasis-transcripts");
-        fs10.mkdirSync(keepDir, { recursive: true });
+        fs11.mkdirSync(keepDir, { recursive: true });
         const kept = path8.join(keepDir, `${id}.txt`);
         const src = transcriptRef;
         transcriptOut.end(() => {
           try {
-            fs10.renameSync(src, kept);
-            fs10.rmSync(dir, { recursive: true, force: true });
+            fs11.renameSync(src, kept);
+            fs11.rmSync(dir, { recursive: true, force: true });
           } catch {
           }
         });
@@ -42879,18 +43993,18 @@ var KiroAdapter = class {
 // ../adapters/src/_core/subprocess.ts
 var import_node_child_process8 = require("node:child_process");
 var import_node_crypto17 = require("node:crypto");
-var fs11 = __toESM(require("node:fs"), 1);
+var fs12 = __toESM(require("node:fs"), 1);
 var os5 = __toESM(require("node:os"), 1);
 var path9 = __toESM(require("node:path"), 1);
 var readline4 = __toESM(require("node:readline"), 1);
 function materialize(job, workRoot) {
   const slug4 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
   const id = `${slug4}-${(0, import_node_crypto17.randomUUID)().slice(0, 8)}`;
-  const dir = fs11.mkdtempSync(path9.join(workRoot ?? os5.tmpdir(), "oasis-session-"));
+  const dir = fs12.mkdtempSync(path9.join(workRoot ?? os5.tmpdir(), "oasis-session-"));
   for (const [rel, content] of Object.entries(job.bundle.files)) {
     const file = path9.join(dir, rel);
-    fs11.mkdirSync(path9.dirname(file), { recursive: true });
-    fs11.writeFileSync(file, content);
+    fs12.mkdirSync(path9.dirname(file), { recursive: true });
+    fs12.writeFileSync(file, content);
   }
   const task = job.bundle.files["TASK.md"];
   if (!task) throw new Error("bundle \u7F3A TASK.md\uFF08\u88C5\u914D\u5668\u5951\u7EA6\uFF09");
@@ -42913,13 +44027,13 @@ function makeFinish(id, cfg, transcriptRefPtr, transcriptOut, dir, exitCbs) {
     if (cfg.cleanupWorkdir) {
       try {
         const keepDir = path9.join(cfg.workRoot ?? os5.tmpdir(), "oasis-transcripts");
-        fs11.mkdirSync(keepDir, { recursive: true });
+        fs12.mkdirSync(keepDir, { recursive: true });
         const kept = path9.join(keepDir, `${id}.txt`);
         const src = transcriptRefPtr.value;
         transcriptOut.end(() => {
           try {
-            fs11.renameSync(src, kept);
-            fs11.rmSync(dir, { recursive: true, force: true });
+            fs12.renameSync(src, kept);
+            fs12.rmSync(dir, { recursive: true, force: true });
           } catch {
           }
         });
@@ -42942,7 +44056,7 @@ function runStreamJson(job, cfg) {
     stdio: ["ignore", "pipe", "pipe"]
   });
   const transcriptRefPtr = { value: path9.join(dir, "transcript.txt") };
-  const transcriptOut = fs11.createWriteStream(transcriptRefPtr.value);
+  const transcriptOut = fs12.createWriteStream(transcriptRefPtr.value);
   const outputCbs = [];
   const telemetryCbs = [];
   const exitCbs = [];
@@ -43000,7 +44114,7 @@ function runOneShotText(job, cfg) {
     stdio: ["ignore", "pipe", "pipe"]
   });
   const transcriptRefPtr = { value: path9.join(dir, "transcript.txt") };
-  const transcriptOut = fs11.createWriteStream(transcriptRefPtr.value);
+  const transcriptOut = fs12.createWriteStream(transcriptRefPtr.value);
   const outputCbs = [];
   const exitCbs = [];
   const { finish, exited } = makeFinish(id, cfg, transcriptRefPtr, transcriptOut, dir, exitCbs);
@@ -45743,9 +46857,18 @@ var PostgresChatSessionStore = class _PostgresChatSessionStore {
         role        text NOT NULL,
         content     text NOT NULL,
         seq         integer NOT NULL,
-        created_at  timestamptz NOT NULL
+        created_at  timestamptz NOT NULL,
+        run_id      text
       )`);
     await pool.query(`CREATE INDEX IF NOT EXISTS chat_messages_session_idx ON "${s2}".chat_messages (session_id, seq)`);
+    await pool.query(`ALTER TABLE "${s2}".chat_messages ADD COLUMN IF NOT EXISTS run_id text`);
+    await pool.query(`
+      CREATE TABLE IF NOT EXISTS "${s2}".chat_session_work_orders (
+        session_id    text NOT NULL,
+        work_order_id text NOT NULL,
+        linked_at     timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY (session_id, work_order_id)
+      )`);
     return new _PostgresChatSessionStore(pool, schema);
   }
   async createSession(s2) {
@@ -45795,9 +46918,9 @@ var PostgresChatSessionStore = class _PostgresChatSessionStore {
   }
   async appendMessage(m2) {
     await this.pool.query(
-      `INSERT INTO ${this.s}.chat_messages (id, session_id, role, content, seq, created_at)
-       VALUES ($1,$2,$3,$4,$5,$6)`,
-      [m2.id, m2.sessionId, m2.role, m2.content, m2.seq, m2.createdAt]
+      `INSERT INTO ${this.s}.chat_messages (id, session_id, role, content, seq, created_at, run_id)
+       VALUES ($1,$2,$3,$4,$5,$6,$7)`,
+      [m2.id, m2.sessionId, m2.role, m2.content, m2.seq, m2.createdAt, m2.runId ?? null]
     );
   }
   async listMessages(sessionId, limit) {
@@ -45809,6 +46932,19 @@ var PostgresChatSessionStore = class _PostgresChatSessionStore {
     const rows = r.rows.map(rowToMessage);
     return limit ? rows.reverse() : rows;
   }
+  async linkWorkOrder(sessionId, workOrderId) {
+    await this.pool.query(
+      `INSERT INTO ${this.s}.chat_session_work_orders (session_id, work_order_id) VALUES ($1,$2) ON CONFLICT DO NOTHING`,
+      [sessionId, workOrderId]
+    );
+  }
+  async listWorkOrdersForSession(sessionId) {
+    const r = await this.pool.query(
+      `SELECT work_order_id FROM ${this.s}.chat_session_work_orders WHERE session_id = $1 ORDER BY linked_at`,
+      [sessionId]
+    );
+    return r.rows.map((row) => row.work_order_id);
+  }
 };
 var rowToSession = (row) => ({
   id: row.id,
@@ -45826,7 +46962,8 @@ var rowToMessage = (row) => ({
   role: row.role,
   content: row.content,
   seq: Number(row.seq),
-  createdAt: new Date(row.created_at).toISOString()
+  createdAt: new Date(row.created_at).toISOString(),
+  ...row.run_id != null ? { runId: row.run_id } : {}
 });
 
 // ../storage/src/postgres-nodes.ts
@@ -46003,18 +47140,42 @@ var rowToRuntime = (row) => ({
 init_src3();
 init_trajectory();
 var DEFAULT_CHAT_SKILLS = ["build-workorder"];
+var SESSION_TOKEN_GRACE_MS = 15 * 6e4;
+function normalizeHttpBaseUrl(raw) {
+  const url = new URL(raw);
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new Error(`public URL \u5FC5\u987B\u662F http(s): ${raw}`);
+  }
+  url.hash = "";
+  url.search = "";
+  const out = url.toString();
+  return out.endsWith("/") ? out.slice(0, -1) : out;
+}
+function apiUrlFromGatewayUrl(raw) {
+  if (!raw) return void 0;
+  try {
+    const url = new URL(raw);
+    if (url.protocol === "wss:") url.protocol = "https:";
+    else if (url.protocol === "ws:") url.protocol = "http:";
+    else if (url.protocol !== "http:" && url.protocol !== "https:") return void 0;
+    url.pathname = url.pathname.replace(/\/node-gateway\/?$/, "") || "/";
+    return normalizeHttpBaseUrl(url.toString());
+  } catch {
+    return void 0;
+  }
+}
 var oasisWrapperCache;
 function oasisWrapperScript() {
-  if (oasisWrapperCache && fs13.existsSync(oasisWrapperCache)) return oasisWrapperCache;
+  if (oasisWrapperCache && fs14.existsSync(oasisWrapperCache)) return oasisWrapperCache;
   const repoRoot = (0, import_node_url3.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path11.join(repoRoot, "node_modules/.bin/tsx");
   const main = path11.join(repoRoot, "packages/cli/src/main.ts");
-  const dir = fs13.mkdtempSync(path11.join(os6.tmpdir(), "oasis-cli-"));
+  const dir = fs14.mkdtempSync(path11.join(os6.tmpdir(), "oasis-cli-"));
   const wrapper = path11.join(dir, "oasis");
-  fs13.writeFileSync(wrapper, `#!/usr/bin/env bash
+  fs14.writeFileSync(wrapper, `#!/usr/bin/env bash
 exec ${JSON.stringify(tsx)} ${JSON.stringify(main)} "$@"
 `);
-  fs13.chmodSync(wrapper, 493);
+  fs14.chmodSync(wrapper, 493);
   oasisWrapperCache = wrapper;
   return wrapper;
 }
@@ -46071,13 +47232,14 @@ async function buildActorContext(service, actorId) {
 function traceRuntimeKind(runtimeKind) {
   if (runtimeKind === "claude" || runtimeKind === "claude-code") return "claude-code";
   if (runtimeKind === "codex") return "codex";
+  if (runtimeKind === "hermes") return "hermes";
   return "custom";
 }
 async function startServe(opts) {
-  fs13.mkdirSync(opts.dir, { recursive: true });
+  fs14.mkdirSync(opts.dir, { recursive: true });
   const lock = path11.join(opts.dir, "serve.lock");
-  if (fs13.existsSync(lock)) {
-    const pid = Number(fs13.readFileSync(lock, "utf8"));
+  if (fs14.existsSync(lock)) {
+    const pid = Number(fs14.readFileSync(lock, "utf8"));
     let alive = false;
     try {
       process.kill(pid, 0);
@@ -46085,12 +47247,12 @@ async function startServe(opts) {
     } catch {
     }
     if (alive) throw new Error(`\u8BE5\u6570\u636E\u76EE\u5F55\u5DF2\u6709 serve \u5728\u8DD1\uFF08pid=${pid}\uFF09\u2014\u2014\u5355\u5199\u8005\u8FDB\u7A0B\uFF0C\u4E0D\u80FD\u53CC\u5F00`);
-    fs13.unlinkSync(lock);
+    fs14.unlinkSync(lock);
   }
-  fs13.writeFileSync(lock, String(process.pid));
+  fs14.writeFileSync(lock, String(process.pid));
   const loadJson = (name) => {
     const file = path11.join(opts.dir, name);
-    return fs13.existsSync(file) ? JSON.parse(fs13.readFileSync(file, "utf8")) : void 0;
+    return fs14.existsSync(file) ? JSON.parse(fs14.readFileSync(file, "utf8")) : void 0;
   };
   const oplog = await NdjsonOplogStore.open(path11.join(opts.dir, "oplog.ndjson"));
   const blobs = new DirBlobStore(path11.join(opts.dir, "blobs"));
@@ -46135,16 +47297,16 @@ async function startServe(opts) {
   const issuer = createTokenIssuer();
   const operatorActor = `actor:human:${os6.userInfo().username}`;
   const operatorToken = issuer.issue(operatorActor);
-  fs13.writeFileSync(path11.join(opts.dir, "operator-token"), operatorToken, { mode: 384 });
+  fs14.writeFileSync(path11.join(opts.dir, "operator-token"), operatorToken, { mode: 384 });
   let nodeTokens = createNodeTokenStore(path11.join(opts.dir, "node-tokens.json"));
   const enrollTokens = createEnrollTokenStore(30 * 60 * 1e3, path11.join(opts.dir, "enroll-tokens.json"));
   let nodeStore = await FileNodeStore.open(path11.join(opts.dir, "nodes.json"));
   const registryAuditFile = path11.join(opts.dir, "registry-audit.ndjson");
   const registryListeners = /* @__PURE__ */ new Set();
-  const registryAudit = (record3) => {
-    fs13.appendFile(registryAuditFile, JSON.stringify(record3) + "\n", () => {
+  const registryAudit = (record4) => {
+    fs14.appendFile(registryAuditFile, JSON.stringify(record4) + "\n", () => {
     });
-    for (const l of registryListeners) l({ kind: record3.kind, actor: record3.actor, target: record3.target, timestamp: record3.timestamp });
+    for (const l of registryListeners) l({ kind: record4.kind, actor: record4.actor, target: record4.target, timestamp: record4.timestamp });
   };
   await syncRegistryRolesToKernel(registryStore, kernel);
   const actors = createActorsDomain({
@@ -46226,20 +47388,22 @@ async function startServe(opts) {
     console.log("[serve] \u8FD0\u884C\u8F68\u8FF9\u4F53\u7CFB\uFF1A\u672C\u5730 ndjson dev store");
   }
   const trace = createTraceDomain({ store: traceStore });
-  const traceStoreSink = new TraceStoreSink({ store: traceStore, runtimeKind: "claude-code" });
+  const traceStoreSink = new TraceStoreSink({ store: traceStore, runtimeKind: "auto" });
   const automationStore = pgPool ? await PostgresAutomationStore.open(pgPool, pgSchema) : new MemoryAutomationStore();
   console.log(`[serve] \u81EA\u52A8\u5316\u4F53\u7CFB\uFF1A${pgPool ? `Postgres schema=${pgSchema}` : "\u5185\u5B58 dev store"}`);
   const automations = createAutomationsDomain({ store: automationStore, kernel });
   const controlPlaneStore = await FileControlPlaneStore.open(path11.join(opts.dir, "control-plane.json"));
-  const companies = createCompaniesDomain({ store: controlPlaneStore, blobs });
-  const jwtSecret = process.env["OASIS_JWT_SECRET"];
-  if (!jwtSecret) console.warn("[serve] OASIS_JWT_SECRET \u672A\u8BBE\u2014\u2014\u7528 dev \u9ED8\u8BA4\u5BC6\u94A5\uFF0C\u751F\u4EA7\u52A1\u5FC5\u914D\u7F6E\uFF08\u5426\u5219\u4F1A\u8BDD\u53EF\u4F2A\u9020\uFF09");
   const resendKey = process.env["RESEND_API_KEY"];
   const mailFrom = process.env["RESEND_FROM_EMAIL"] ?? process.env["OASIS_MAIL_FROM"] ?? "noreply@open-friday.com";
-  if (!resendKey) console.warn("[serve] RESEND_API_KEY \u672A\u8BBE\u2014\u2014\u9A8C\u8BC1\u7801\u6253\u5370\u5230\u65E5\u5FD7\uFF08dev\uFF09\uFF1B\u751F\u4EA7\u8BF7\u914D RESEND_API_KEY + RESEND_FROM_EMAIL\uFF08Resend \u5DF2\u9A8C\u8BC1\u57DF\u540D\uFF09");
+  if (!resendKey) console.warn("[serve] RESEND_API_KEY \u672A\u8BBE\u2014\u2014\u9A8C\u8BC1\u7801/\u9080\u8BF7\u6253\u5370\u5230\u65E5\u5FD7\uFF08dev\uFF09\uFF1B\u751F\u4EA7\u8BF7\u914D RESEND_API_KEY + RESEND_FROM_EMAIL\uFF08Resend \u5DF2\u9A8C\u8BC1\u57DF\u540D\uFF09");
+  const mailSender = resendKey ? resendSender({ apiKey: resendKey, from: mailFrom }) : consoleSender();
+  const consoleUrl = process.env["OASIS_CONSOLE_URL"] ?? "https://design.open-friday.com/oasis-preview/";
+  const companies = createCompaniesDomain({ store: controlPlaneStore, blobs, sender: mailSender, consoleUrl });
+  const jwtSecret = process.env["OASIS_JWT_SECRET"];
+  if (!jwtSecret) console.warn("[serve] OASIS_JWT_SECRET \u672A\u8BBE\u2014\u2014\u7528 dev \u9ED8\u8BA4\u5BC6\u94A5\uFF0C\u751F\u4EA7\u52A1\u5FC5\u914D\u7F6E\uFF08\u5426\u5219\u4F1A\u8BDD\u53EF\u4F2A\u9020\uFF09");
   const auth = createAuth({
     store: controlPlaneStore,
-    sender: resendKey ? resendSender({ apiKey: resendKey, from: mailFrom }) : consoleSender(),
+    sender: mailSender,
     jwtSecret: jwtSecret ?? "oasis-dev-secret-change-me",
     // dev 经 http/vite 反代，置 Secure 会丢 cookie；生产经 https 应由部署设 OASIS_SECURE_COOKIE=1
     secureCookie: process.env["OASIS_SECURE_COOKIE"] === "1",
@@ -46247,11 +47411,7 @@ async function startServe(opts) {
     provisionAccount: (email2) => companies.service.ensureAccount(email2)
   });
   await migrateDefaultCompany(controlPlaneStore, await actors.service.listActors());
-  for (const devActor of ["actor:human:yx"]) {
-    if (!await controlPlaneStore.getMember(DEFAULT_COMPANY_ID, devActor)) {
-      await controlPlaneStore.upsertMember({ companyId: DEFAULT_COMPANY_ID, accountId: devActor, actorId: devActor, role: "member" });
-    }
-  }
+  await bootstrapBuildWorkorderSkill(actors.service).catch((err) => console.warn(`[serve] build-workorder skill bootstrap failed: ${String(err)}`));
   if (!await controlPlaneStore.getMember(DEFAULT_COMPANY_ID, operatorActor)) {
     await controlPlaneStore.upsertMember({ companyId: DEFAULT_COMPANY_ID, accountId: operatorActor, actorId: operatorActor, role: "owner" });
   }
@@ -46283,12 +47443,12 @@ async function startServe(opts) {
     return auth.sessionAccountId(headers);
   };
   const interventionDrafts = new InterventionDraftStore();
-  const workorderDrafts = new WorkorderDraftStore();
+  const workorderDrafts = new WorkorderDraftStore(path11.join(opts.dir, "workorder-drafts.json"));
   const journalFile = path11.join(opts.dir, "dispatch-journal.ndjson");
   const journalRing = [];
-  if (fs13.existsSync(journalFile)) {
+  if (fs14.existsSync(journalFile)) {
     try {
-      const lines = fs13.readFileSync(journalFile, "utf8").split(/\r?\n/).filter(Boolean);
+      const lines = fs14.readFileSync(journalFile, "utf8").split(/\r?\n/).filter(Boolean);
       for (const line of lines.slice(-500)) {
         try {
           journalRing.push(JSON.parse(line));
@@ -46301,9 +47461,43 @@ async function startServe(opts) {
   const journal = (entry) => {
     journalRing.push(entry);
     if (journalRing.length > 500) journalRing.shift();
-    fs13.appendFile(journalFile, JSON.stringify(entry) + "\n", () => {
+    fs14.appendFile(journalFile, JSON.stringify(entry) + "\n", () => {
     });
   };
+  const closeOrphanedDispatches = () => {
+    const open = /* @__PURE__ */ new Map();
+    for (const entry of journalRing) {
+      if (entry.kind === "dispatched") {
+        open.set(entry.jobKey, entry);
+      } else if (entry.kind === "exited" || entry.kind === "fused") {
+        open.delete(entry.jobKey);
+      }
+    }
+    if (open.size === 0) return;
+    const now = Date.now();
+    const at = new Date(now).toISOString();
+    for (const entry of open.values()) {
+      const startedAt = Date.parse(entry.at);
+      const lastOpAt = kernel.model.lastOpAt.get(entry.artifactId);
+      const lastOpTime = lastOpAt ? Date.parse(lastOpAt) : NaN;
+      const progressed = Number.isFinite(startedAt) && Number.isFinite(lastOpTime) && lastOpTime > startedAt;
+      journal({
+        kind: "exited",
+        at,
+        jobKey: entry.jobKey,
+        artifactId: entry.artifactId,
+        actor: entry.actor,
+        action: entry.action,
+        code: null,
+        reason: "timeout",
+        durationMs: Number.isFinite(startedAt) ? Math.max(0, now - startedAt) : 0,
+        progressed,
+        consecutiveFailures: progressed ? 0 : 1
+      });
+    }
+    console.warn(`[dispatch] closed ${open.size} orphaned dispatch journal entr${open.size === 1 ? "y" : "ies"} from a previous server process`);
+  };
+  if (opts.dispatch) closeOrphanedDispatches();
   let dispatcher;
   const trajListeners = /* @__PURE__ */ new Set();
   const trajectorySink = new FsTrajectorySink(opts.dir, (msg) => {
@@ -46326,6 +47520,27 @@ async function startServe(opts) {
   let hub = null;
   let chatRemoteAdapter = null;
   let localUrl = "";
+  const remoteApiUrl = opts.publicUrl ? normalizeHttpBaseUrl(opts.publicUrl) : apiUrlFromGatewayUrl(opts.gatewayUrl);
+  const serverUrlForBinding = (binding) => {
+    if (!binding?.nodeId) return localUrl;
+    if (remoteApiUrl) return remoteApiUrl;
+    throw new Error(`\u8FDC\u7A0B\u8282\u70B9 ${binding.nodeId} \u9700\u8981\u53EF\u8FBE\u7684 Oasis API \u5730\u5740\uFF1A\u914D\u7F6E --public-url / $OASIS_PUBLIC_URL\uFF0C\u6216\u4F7F\u7528\u53EF\u63A8\u5BFC\u7684 --gateway-url`);
+  };
+  const issueSessionToken = (actorId, ctx) => {
+    const token = issuer.issue(actorId, {
+      ttlMs: ctx.limits.wallClockMs + SESSION_TOKEN_GRACE_MS,
+      artifactId: ctx.artifactId,
+      action: ctx.action,
+      ...ctx.sessionId !== void 0 ? { sessionId: ctx.sessionId } : {},
+      ...ctx.binding?.nodeId !== void 0 ? { nodeId: ctx.binding.nodeId } : {},
+      ...ctx.binding?.runtimeKind !== void 0 ? { runtimeKind: ctx.binding.runtimeKind } : {},
+      scopes: ctx.scopes ?? ["oasis:api"]
+    });
+    if (issuer.resolve(token) !== actorId) {
+      throw new Error(`\u521A\u7B7E\u53D1\u7684 OASIS_TOKEN \u65E0\u6CD5\u89E3\u6790\u4E3A ${actorId}`);
+    }
+    return token;
+  };
   let resolveCodeRepoRef;
   const server = await startOasisServer({
     kernel: engine.kernel,
@@ -46373,15 +47588,17 @@ async function startServe(opts) {
         console.warn(`[planner] skill materialize failed for ${planner.id}: ${String(err)}`);
         return {};
       }));
+      const limits = { wallClockMs: 5 * 6e4 };
+      const artifactId = `artifact:planner:${(0, import_node_crypto20.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
-        actorToken: issuer.issue(planner.id),
-        artifactId: `artifact:planner:${(0, import_node_crypto20.randomUUID)()}`,
+        actorToken: issueSessionToken(planner.id, { artifactId, action: "plan-workorder", limits, binding }),
+        artifactId,
         bundle: { files },
         ...actorCtx?.config?.prompt ? { systemPrompt: actorCtx.config.prompt } : {},
-        server: { url: localUrl },
+        server: { url: serverUrlForBinding(binding) },
         binding,
-        limits: { wallClockMs: 5 * 6e4 },
+        limits,
         env: provision.env,
         wrapperPaths: provision.wrapperPaths
       });
@@ -46415,15 +47632,18 @@ async function startServe(opts) {
         registry: registryStore,
         artifacts: artifactStateStore,
         dispatchJournal: () => journalRing.slice(-200),
+        workorderDrafts,
+        // 活工单查不到时回退查建单草案（status="draft"）
         ...opts.sla ? { sla: opts.sla } : {},
         resolveEngine: (cid) => engineRouter.getEngine(cid ?? DEFAULT_COMPANY_ID)
       }),
       trace.register,
       automations.register,
-      ...chatSessionStore ? [createChatSessionsDomain({ store: chatSessionStore, registry: registryStore })] : []
+      ...chatSessionStore ? [createChatSessionsDomain({ store: chatSessionStore, registry: registryStore, trace: traceStore, kernel, artifactState: artifactStateStore })] : []
     ],
     drafts: interventionDrafts,
     workorderDrafts,
+    ...chatSessionStore ? { chatSession: chatSessionStore } : {},
     // 暴露注册的 artifact 类型，给前端「发起工单」动态拉取根产物可选类型——schema.json 增改即自动扩展，
     // 前端不再写死枚举。走通用 /api/view（generic data），非域路由契约，不进 gen:api。
     views: {
@@ -46443,6 +47663,7 @@ async function startServe(opts) {
     resolveActorEnv: async (actorId) => (await buildActorProvision(actors.service, actorId)).env,
     resolveActorContext: (actorId) => buildActorContext(actors.service, actorId),
     materializeSkills: (actorId, runtimeKind) => materializeSkillFiles({ service: actors.service, blobs: assets, actorId, runtimeKind }),
+    uploadChatAttachment: async ({ contentBase64 }) => ({ blobRef: await assets.put(new Uint8Array(Buffer.from(contentBase64, "base64"))) }),
     dispatchProduce: async ({ artifactId, actorId, part }) => {
       if (!dispatcher) {
         throw new ApiError(503, "DISPATCH_NOT_ENABLED", "\u670D\u52A1\u7AEF\u672A\u542F\u7528 --dispatch true\uFF0C\u4E0D\u80FD\u62C9\u8D77\u771F\u5B9E\u667A\u80FD\u4F53\u4FEE\u6539");
@@ -46453,7 +47674,7 @@ async function startServe(opts) {
         ...part !== void 0 ? { part } : {}
       });
     },
-    dispatchChat: async ({ actorId, message, sessionId }) => {
+    dispatchChat: async ({ actorId, message, sessionId, chatSessionId, attachments }) => {
       const binding = await actors.service.resolveBinding()(actorId);
       if (!binding) {
         throw new ApiError(409, "ACTOR_BINDING_MISSING", `\u6570\u5B57\u5458\u5DE5 ${actorId} \u6CA1\u6709 active runtime \u7ED1\u5B9A`);
@@ -46526,6 +47747,29 @@ async function startServe(opts) {
       };
       const provision = await buildActorProvision(actors.service, actorId);
       const actorCtx = await buildActorContext(actors.service, actorId).catch(() => null);
+      const attachmentFiles = {};
+      const attachmentBinary = {};
+      const attachmentPaths = [];
+      const usedRel = /* @__PURE__ */ new Set();
+      for (const att of attachments ?? []) {
+        const safe = (att.name || "attachment").replace(/[^\w.\-]+/g, "_").replace(/^\.+/, "").slice(0, 80) || "attachment";
+        let rel = `inputs/attachments/${safe}`;
+        let n = 1;
+        while (usedRel.has(rel)) rel = `inputs/attachments/${n++}-${safe}`;
+        usedRel.add(rel);
+        if (typeof att.text === "string") {
+          attachmentFiles[rel] = att.text;
+          attachmentPaths.push(rel);
+        } else if (att.blobRef) {
+          try {
+            const bytes = await assets.get(att.blobRef);
+            attachmentBinary[rel] = Buffer.from(bytes).toString("base64");
+            attachmentPaths.push(rel);
+          } catch (err) {
+            console.warn(`[chat] \u9644\u4EF6 blob ${att.blobRef} \u8BFB\u53D6\u5931\u8D25: ${String(err)}`);
+          }
+        }
+      }
       const files = {
         "TASK.md": [
           "# \u5373\u65F6\u8111\u66B4\u5BF9\u8BDD",
@@ -46534,12 +47778,14 @@ async function startServe(opts) {
           `actor_id: ${actorId}`,
           "",
           "\u8BF7\u76F4\u63A5\u56DE\u7B54\u7528\u6237\u95EE\u9898\u3002\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\u5199\u5165\u7CFB\u7EDF\uFF0C\u5426\u5219\u4E0D\u8981\u521B\u5EFA\u6216\u4FEE\u6539 artifact\u3002",
+          ...attachmentPaths.length ? ["", "## \u7528\u6237\u9644\u4EF6", "", "\u7528\u6237\u968F\u6D88\u606F\u9644\u5E26\u4E86\u4EE5\u4E0B\u6587\u4EF6\uFF08\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u53EF\u76F4\u63A5\u8BFB\u53D6\uFF09\uFF1A", ...attachmentPaths.map((p2) => `- ${p2}`)] : [],
           "",
           "## \u7528\u6237\u6D88\u606F",
           "",
           message
         ].join("\n")
       };
+      Object.assign(files, attachmentFiles);
       if (actorCtx?.config?.prompt) {
         Object.assign(files, splitIdentityFiles3(actorCtx.config.prompt));
       }
@@ -46553,18 +47799,23 @@ async function startServe(opts) {
         console.warn(`[chat] skill materialize failed for ${actorId}: ${String(err)}`);
         return {};
       }));
+      const limits = { wallClockMs: 10 * 6e4 };
+      const artifactId = `artifact:chat:${(0, import_node_crypto20.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: actorId,
-        actorToken: issuer.issue(actorId),
-        artifactId: `artifact:chat:${(0, import_node_crypto20.randomUUID)()}`,
-        bundle: { files },
+        actorToken: issueSessionToken(actorId, { artifactId, action: "chat", limits, binding, sessionId: runtimeSessionId }),
+        artifactId,
+        bundle: { files, ...Object.keys(attachmentBinary).length ? { binaryFiles: attachmentBinary } : {} },
         ...actorCtx?.config?.prompt ? { systemPrompt: actorCtx.config.prompt } : {},
         runtimeSessionId,
         resumeRuntimeSession,
-        server: { url: localUrl },
+        server: { url: serverUrlForBinding(binding) },
         binding,
-        limits: { wallClockMs: 10 * 6e4 },
-        env: provision.env,
+        limits,
+        // OASIS_STAGE=1：chat agent 的改图命令（edit/link/spawn/cancel）经 /api/stage → 草案路由
+        // （建单/改图暂存统一，见 docs/proposals/draft-edit-unification.md）。不设 OASIS_WORKSPACE——
+        // chat agent 不绑单一工单，按命令 --workspace / id 定位是哪份草案。
+        env: { ...provision.env, OASIS_STAGE: "1", ...chatSessionId ? { OASIS_CHAT_SESSION_ID: chatSessionId } : {} },
         wrapperPaths: provision.wrapperPaths
       });
       const buffered = [];
@@ -46607,6 +47858,7 @@ async function startServe(opts) {
       });
       return {
         id: runtimeSessionId,
+        runId: traceRunId,
         onOutput(cb) {
           for (const chunk of buffered.splice(0)) cb(chunk);
           outputCbs.push(cb);
@@ -46637,6 +47889,7 @@ async function startServe(opts) {
   chatRemoteAdapter = new DaemonHubAdapter(hub);
   const port = new URL(server.baseUrl).port;
   localUrl = `http://127.0.0.1:${port}`;
+  console.log(`[serve] \u8FDC\u7A0B agent API URL\uFF1A${remoteApiUrl ?? "\u672A\u914D\u7F6E\uFF08\u4EC5\u652F\u6301\u672C\u673A runtime\uFF09"}`);
   const projectsCfg = loadJson("projects.json");
   const seedProjects = (projectsCfg?.projects ?? []).map(
     (p2) => p2.repos?.length ? { ...p2, repos: p2.repos.map((r) => r.repoDir ? { ...r, repoDir: path11.resolve(opts.dir, r.repoDir) } : r) } : p2
@@ -46684,6 +47937,7 @@ async function startServe(opts) {
         remote: new DaemonHubAdapter(hub)
       }),
       serverUrl: localUrl,
+      serverUrlFor: (ctx) => serverUrlForBinding(ctx.binding),
       resolveBinding: actors.service.resolveBinding(),
       provision: (actorId) => buildActorProvision(actors.service, actorId),
       resolveActorContext: (actorId) => buildActorContext(actors.service, actorId),
@@ -46693,7 +47947,13 @@ async function startServe(opts) {
       // §4/C：异步从权威源（store）解析；dispatcher 装配前 await
       // #2 派单开关：工单"待派发"（控制面旁存标 held）时不派其活。held 集通常空、表极小，每次查可接受。
       resolveDispatchHold: async (ws) => (await artifactStateStore.listWorkspaceDispatchHeld()).includes(ws),
-      tokenFor: (actor) => issuer.issue(actor),
+      tokenFor: (actor, ctx) => issueSessionToken(actor, {
+        artifactId: ctx.artifactId,
+        action: ctx.action,
+        limits: ctx.limits,
+        ...ctx.binding !== void 0 ? { binding: ctx.binding } : {},
+        ...ctx.part !== void 0 ? { sessionId: `${ctx.action}:${ctx.artifactId}:${ctx.part}` } : {}
+      }),
       journal,
       // TrajectoryEvent 是唯一事件模型；trace 旁账与 M7 蒸馏库并行消费同一流（§16.D 收口）。
       trajectory: combineTrajectorySinks([trajectorySink, traceStoreSink]),
@@ -46834,14 +48094,24 @@ async function startServe(opts) {
     const coordinator = new CoordinatorWorker({
       kernel,
       oplog,
-      adapter: new ConnectorAwareAdapter({
-        streamJson: true,
-        maxOutputTokens: opts.maxOutputTokens ?? 64e3,
-        cleanupWorkdir: true,
-        ...opts.model ? { model: opts.model } : {}
+      adapter: new BindingRouterAdapter({
+        local: new ConnectorAwareAdapter({
+          streamJson: true,
+          maxOutputTokens: opts.maxOutputTokens ?? 64e3,
+          cleanupWorkdir: true,
+          ...opts.model ? { model: opts.model } : {}
+        }),
+        remote: new DaemonHubAdapter(hub)
       }),
       serverUrl: localUrl,
-      tokenFor: (actor) => issuer.issue(actor),
+      serverUrlFor: (ctx) => serverUrlForBinding(ctx.binding),
+      tokenFor: (actor, ctx) => issueSessionToken(actor, {
+        artifactId: ctx?.artifactId ?? "artifact:coordinator",
+        action: ctx?.action ?? "coordinate",
+        limits: ctx?.limits ?? { wallClockMs: 5 * 6e4 },
+        ...ctx?.binding !== void 0 ? { binding: ctx.binding } : {}
+      }),
+      resolveCoordinator: () => resolveCoordinator(registryStore),
       schemaTypes: schema.map((d) => d.name),
       schemaTypeDescriptions: Object.fromEntries(schema.filter((d) => d.description).map((d) => [d.name, d.description])),
       provision: (actorId) => buildActorProvision(actors.service, actorId),
@@ -46897,7 +48167,7 @@ async function startServe(opts) {
       await server.close();
       if (pgPool) await pgPool.end().catch(() => {
       });
-      fs13.rmSync(lock, { force: true });
+      fs14.rmSync(lock, { force: true });
     }
   };
 }
@@ -46945,8 +48215,22 @@ function log2(tag, msg, extra) {
 // ../cli/src/daemon/ws-client.ts
 var RECONNECT_DELAY_MS = 3e3;
 var PING_INTERVAL_MS = 2e4;
+async function preflightOasisAccess(job) {
+  const base = job.server.url.replace(/\/+$/, "");
+  try {
+    const res = await fetch(`${base}/api/whoami`, {
+      headers: { authorization: `Bearer ${job.actorToken}` },
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (res.status === 401 || res.status === 403) return { code: null, reason: "auth-error" };
+    if (!res.ok) return { code: null, reason: "server-unreachable" };
+    return null;
+  } catch {
+    return { code: null, reason: "server-unreachable" };
+  }
+}
 var DaemonWsClient = class {
-  constructor(serverUrl, daemonId, sessions, adapters = ["claude-code"], token, runtimes = adapters.map((kind) => ({ kind })), nodeName, reportRuntimes = false) {
+  constructor(serverUrl, daemonId, sessions, adapters = ["claude-code"], token, runtimes = adapters.map((kind) => ({ kind })), nodeName, reportRuntimes = true, preflight = true) {
     this.serverUrl = serverUrl;
     this.daemonId = daemonId;
     this.sessions = sessions;
@@ -46955,6 +48239,7 @@ var DaemonWsClient = class {
     this.runtimes = runtimes;
     this.nodeName = nodeName;
     this.reportRuntimes = reportRuntimes;
+    this.preflight = preflight;
   }
   ws = null;
   pingTimer = null;
@@ -47011,6 +48296,14 @@ var DaemonWsClient = class {
         const t0 = Date.now();
         log2("[node-cli]", `\u2190 dispatch  ${dispatchId}  artifact=${job.artifactId}`);
         try {
+          if (this.preflight) {
+            const preflightFailure = await preflightOasisAccess(job);
+            if (preflightFailure) {
+              log2("[node-cli]", `  preflight failed: ${preflightFailure.reason}`);
+              this.send({ type: "session_exited", dispatchId, sessionId: "preflight-failed", info: preflightFailure });
+              return;
+            }
+          }
           const handle = await this.sessions.getAdapter().spawn(job);
           this.sessions.register(dispatchId, handle);
           log2("[node-cli]", `  \u2192 session_started  id=${handle.id}  setup=${Date.now() - t0}ms`);
@@ -47030,7 +48323,10 @@ var DaemonWsClient = class {
       }
       case "kill": {
         log2("[node-cli]", `\u2190 kill  dispatch=${msg.dispatchId}`);
-        await this.sessions.kill(msg.dispatchId);
+        const killed = await this.sessions.kill(msg.dispatchId);
+        if (!killed) {
+          this.send({ type: "session_exited", dispatchId: msg.dispatchId, sessionId: "missing-session", info: { code: null, reason: "timeout" } });
+        }
         break;
       }
       case "ping":
@@ -47163,8 +48459,9 @@ async function startNode(opts) {
 init_src4();
 var USAGE = `oasis \u2014\u2014 artifact-centric \u534F\u4F5C\u5185\u6838 CLI\uFF08\u670D\u52A1\u7AEF\u7626\u5BA2\u6237\u7AEF\uFF09
 
-  oasis serve [--dir .oasis] [--port 7320] [--dispatch true [--model haiku] [--max-produce-per-agent 5] [--max-concurrent-produce N]] [--allow-simple-tokens true] [--gateway-url wss://host/oasis-api/node-gateway]
+  oasis serve [--dir .oasis] [--port 7320] [--dispatch true [--model haiku] [--max-produce-per-agent 5] [--max-concurrent-produce N]] [--allow-simple-tokens true] [--public-url https://host/oasis-api] [--gateway-url wss://host/oasis-api/node-gateway]
       # --gateway-url\uFF08\u6216 $OASIS_GATEWAY_URL\uFF09\uFF1A\u8282\u70B9\u5165\u7F51\u811A\u672C\u91CC\u5B88\u62A4\u8FDB\u7A0B\u8981\u8FDE\u7684\u7F51\u5173 URL\uFF1B\u516C\u7F51\u7ECF nginx \u5FC5\u8BBE\uFF0C\u5426\u5219\u9ED8\u8BA4\u672C\u673A ws://127.0.0.1:<port>\u3002
+      # --public-url\uFF08\u6216 $OASIS_PUBLIC_URL\uFF09\uFF1A\u8FDC\u7A0B node \u4E0A agent \u56DE\u8FDE\u7684 HTTP API \u5730\u5740\uFF1B\u7F3A\u7701\u4ECE gateway-url \u63A8\u5BFC\u3002
   oasis export-trajectories [--dir d] [--out samples.jsonl]   \u5BFC\u51FA\u84B8\u998F\u6837\u672C\uFF08\u8F93\u5165\u5305+\u4E8B\u4EF6\u6D41+\u7ED3\u679C\u5F15\u7528+gate \u6807\u7B7E\uFF09
   oasis serve install [--dir d] [--port p] [--dispatch true --model m] [--bin ~/.local/bin/oasis] [--unit-dir ~/.config/systemd/user]   \u751F\u6210 systemd \u7528\u6237\u5355\u5143\uFF08D2 \u5B88\u62A4\u5316\uFF09
       \u5E38\u9A7B\u670D\u52A1\uFF08\u552F\u4E00\u5199\u8005\u8FDB\u7A0B\uFF09\uFF1A/api \u7ED9 CLI\u3001\u524D\u7AEF\u4E0E agent\uFF08agent \u901A\u8FC7 oasis CLI \u8C03\u7528\uFF09\u3002
@@ -47280,7 +48577,10 @@ function projectSlug(value) {
   return value.trim().toLowerCase().replace(/[^\w\u4e00-\u9fa5\s-]/g, "").replace(/\s+/g, "-").replace(/-+/g, "-").slice(0, 32);
 }
 function makeClient(base, token) {
-  const headers = { authorization: `Bearer ${token}`, "content-type": "application/json" };
+  const baseHeaders = { authorization: `Bearer ${token}`, "content-type": "application/json" };
+  const chatSessionId = process.env["OASIS_CHAT_SESSION_ID"];
+  if (chatSessionId) baseHeaders["x-chat-session-id"] = chatSessionId;
+  const headers = baseHeaders;
   const fail = async (res) => {
     const body = await res.json().catch(() => ({}));
     const err = body.error;
@@ -47336,9 +48636,9 @@ async function runCli(argv, println = console.log) {
     const nodeTokenFile = path12.join(dir, "node-token");
     const enrollTokenFile = path12.join(dir, "enroll-token");
     const reportMarkerFile = path12.join(dir, "report-runtimes");
-    let nodeId = fs14.existsSync(nodeIdFile) ? fs14.readFileSync(nodeIdFile, "utf8").trim() : null;
-    let token2 = flags.get("token") ?? process.env["OASIS_NODE_TOKEN"] ?? (fs14.existsSync(nodeTokenFile) ? fs14.readFileSync(nodeTokenFile, "utf8").trim() : void 0);
-    const enrollToken = flags.get("enroll-token") ?? process.env["OASIS_ENROLL_TOKEN"] ?? (fs14.existsSync(enrollTokenFile) ? fs14.readFileSync(enrollTokenFile, "utf8").trim() : void 0);
+    let nodeId = fs15.existsSync(nodeIdFile) ? fs15.readFileSync(nodeIdFile, "utf8").trim() : null;
+    let token2 = flags.get("token") ?? process.env["OASIS_NODE_TOKEN"] ?? (fs15.existsSync(nodeTokenFile) ? fs15.readFileSync(nodeTokenFile, "utf8").trim() : void 0);
+    const enrollToken = flags.get("enroll-token") ?? process.env["OASIS_ENROLL_TOKEN"] ?? (fs15.existsSync(enrollTokenFile) ? fs15.readFileSync(enrollTokenFile, "utf8").trim() : void 0);
     let freshEnrollment = false;
     if ((!nodeId || !token2) && enrollToken) {
       const httpBase2 = serverUrl.replace(/^ws(s?):\/\//, "http$1://").replace(/\/node-gateway.*$/, "");
@@ -47351,26 +48651,26 @@ async function runCli(argv, println = console.log) {
       const body = await res.json();
       nodeId = body.nodeId;
       token2 = body.token;
-      fs14.mkdirSync(dir, { recursive: true });
-      fs14.writeFileSync(nodeIdFile, nodeId);
-      fs14.writeFileSync(nodeTokenFile, token2, { mode: 384 });
+      fs15.mkdirSync(dir, { recursive: true });
+      fs15.writeFileSync(nodeIdFile, nodeId);
+      fs15.writeFileSync(nodeTokenFile, token2, { mode: 384 });
       try {
-        fs14.unlinkSync(enrollTokenFile);
+        fs15.unlinkSync(enrollTokenFile);
       } catch {
       }
       freshEnrollment = true;
     }
     if (!nodeId) throw new Error("no nodeId \u2014 provide --enroll-token <ent_...> on first run");
-    const scriptRun = freshEnrollment || fs14.existsSync(reportMarkerFile);
+    const scriptRun = freshEnrollment || fs15.existsSync(reportMarkerFile);
     if (flags.has("service")) {
       const { spawnSync, execSync: execSync2 } = await import("node:child_process");
       if (token2) {
-        fs14.mkdirSync(dir, { recursive: true });
-        fs14.writeFileSync(nodeTokenFile, token2, { mode: 384 });
+        fs15.mkdirSync(dir, { recursive: true });
+        fs15.writeFileSync(nodeTokenFile, token2, { mode: 384 });
       }
       if (scriptRun) {
-        fs14.mkdirSync(dir, { recursive: true });
-        fs14.writeFileSync(reportMarkerFile, "");
+        fs15.mkdirSync(dir, { recursive: true });
+        fs15.writeFileSync(reportMarkerFile, "");
       }
       println("\u2192 Installing oasis_test globally...");
       spawnSync("npm", ["install", "-g", "oasis_test@latest"], { stdio: "inherit" });
@@ -47379,10 +48679,10 @@ async function runCli(argv, println = console.log) {
       const svcArgs = `node --server-ws ${serverUrl} --dir ${dir}${nodeName ? ` --name ${nodeName}` : ""}`;
       if (process.platform === "linux") {
         const svcFile = path12.join(os7.homedir(), ".config/systemd/user/oasis-node.service");
-        fs14.mkdirSync(path12.dirname(svcFile), { recursive: true });
+        fs15.mkdirSync(path12.dirname(svcFile), { recursive: true });
         if (spawnSync("systemctl", ["--user", "is-active", "--quiet", "oasis-node"], {}).status === 0)
           spawnSync("systemctl", ["--user", "stop", "oasis-node"], { stdio: "inherit" });
-        fs14.writeFileSync(svcFile, [
+        fs15.writeFileSync(svcFile, [
           "[Unit]",
           "Description=Oasis Node Daemon",
           "After=network.target",
@@ -47410,10 +48710,10 @@ async function runCli(argv, println = console.log) {
         println("  Stop   : systemctl --user stop oasis-node");
       } else if (process.platform === "darwin") {
         const plist = path12.join(os7.homedir(), "Library/LaunchAgents/com.oasis.node.plist");
-        fs14.mkdirSync(path12.dirname(plist), { recursive: true });
+        fs15.mkdirSync(path12.dirname(plist), { recursive: true });
         spawnSync("launchctl", ["unload", plist], { stdio: "ignore" });
         const argXml = [binPath, "node", "--server-ws", serverUrl, "--dir", dir, ...nodeName ? ["--name", nodeName] : []].map((a) => `<string>${a}</string>`).join("");
-        fs14.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os7.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os7.homedir()}/.oasis-node.err</string></dict></plist>`);
+        fs15.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os7.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os7.homedir()}/.oasis-node.err</string></dict></plist>`);
         spawnSync("launchctl", ["load", plist], { stdio: "inherit" });
         println("\u2713 Oasis node service started (macOS LaunchAgent com.oasis.node)");
         println(`  Logs : tail -f ${os7.homedir()}/.oasis-node.log`);
@@ -47425,9 +48725,9 @@ async function runCli(argv, println = console.log) {
       }
       return;
     }
-    if (fs14.existsSync(reportMarkerFile)) {
+    if (fs15.existsSync(reportMarkerFile)) {
       try {
-        fs14.unlinkSync(reportMarkerFile);
+        fs15.unlinkSync(reportMarkerFile);
       } catch {
       }
     }
@@ -47479,7 +48779,7 @@ async function runCli(argv, println = console.log) {
     const outFile = flags.get("out");
     const lines = samples.map((sample) => JSON.stringify(sample)).join("\n");
     if (outFile !== void 0) {
-      fs14.writeFileSync(outFile, lines + (lines ? "\n" : ""));
+      fs15.writeFileSync(outFile, lines + (lines ? "\n" : ""));
       println(`\u5DF2\u5BFC\u51FA ${samples.length} \u6761\u8F68\u8FF9\u6837\u672C \u2192 ${outFile}\uFF08approved/rejected \u6210\u5BF9\u5373\u504F\u597D\u5BF9\uFF09`);
     } else {
       println(lines);
@@ -47507,9 +48807,9 @@ async function runCli(argv, println = console.log) {
       `WantedBy=default.target`,
       ``
     ].join("\n");
-    fs14.mkdirSync(unitDir, { recursive: true });
+    fs15.mkdirSync(unitDir, { recursive: true });
     const unitPath = path12.join(unitDir, `${name}.service`);
-    fs14.writeFileSync(unitPath, unit);
+    fs15.writeFileSync(unitPath, unit);
     println(`\u5DF2\u5199\u5165 ${unitPath}`);
     println(`\u542F\u7528\uFF1Asystemctl --user daemon-reload && systemctl --user enable --now ${name}`);
     println(`\u5F00\u673A\u81EA\u542F\uFF08\u542B\u672A\u767B\u5F55\uFF09\uFF1Aloginctl enable-linger $USER`);
@@ -47526,6 +48826,7 @@ async function runCli(argv, println = console.log) {
       ...flags.has("max-produce-per-agent") ? { maxConcurrentProducePerActor: Number(flags.get("max-produce-per-agent")) } : {},
       ...flags.has("model") ? { model: flags.get("model") } : {},
       allowSimpleTokens: flags.get("allow-simple-tokens") === "true",
+      ...flags.get("public-url") ?? process.env["OASIS_PUBLIC_URL"] ? { publicUrl: flags.get("public-url") ?? process.env["OASIS_PUBLIC_URL"] } : {},
       ...flags.get("gateway-url") ?? process.env["OASIS_GATEWAY_URL"] ? { gatewayUrl: flags.get("gateway-url") ?? process.env["OASIS_GATEWAY_URL"] } : {}
     });
     const port2 = new URL(handle.baseUrl).port;
@@ -47538,12 +48839,12 @@ async function runCli(argv, println = console.log) {
   }
   const base = flags.get("server") ?? process.env["OASIS_SERVER"] ?? "http://127.0.0.1:7320";
   const tokenFile = path12.join(dir, "operator-token");
-  const token = flags.get("token") ?? process.env["OASIS_TOKEN"] ?? (fs14.existsSync(tokenFile) ? fs14.readFileSync(tokenFile, "utf8").trim() : void 0);
+  const token = flags.get("token") ?? process.env["OASIS_TOKEN"] ?? (fs15.existsSync(tokenFile) ? fs15.readFileSync(tokenFile, "utf8").trim() : void 0);
   if (!token) {
     throw new Error(`\u65E0 token\uFF1A\u5148 oasis serve\uFF08\u4F1A\u751F\u6210 ${tokenFile}\uFF09\uFF0C\u6216\u663E\u5F0F --token / $OASIS_TOKEN`);
   }
   const api = makeClient(base, token);
-  const readFileArg = (file) => fs14.readFileSync(file, "utf8");
+  const readFileArg = (file) => fs15.readFileSync(file, "utf8");
   const parseJsonFlag = (value, name) => {
     const parsed = JSON.parse(value);
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
@@ -47561,11 +48862,11 @@ async function runCli(argv, println = console.log) {
   const readDirFiles = (root) => {
     const out = [];
     const walk = (abs, rel) => {
-      for (const name of fs14.readdirSync(abs)) {
+      for (const name of fs15.readdirSync(abs)) {
         const childAbs = path12.join(abs, name);
         const childRel = rel ? `${rel}/${name}` : name;
-        if (fs14.statSync(childAbs).isDirectory()) walk(childAbs, childRel);
-        else out.push({ path: childRel, contentBase64: fs14.readFileSync(childAbs).toString("base64") });
+        if (fs15.statSync(childAbs).isDirectory()) walk(childAbs, childRel);
+        else out.push({ path: childRel, contentBase64: fs15.readFileSync(childAbs).toString("base64") });
       }
     };
     walk(root, "");
@@ -47608,9 +48909,10 @@ async function runCli(argv, println = console.log) {
         };
       case "spawn": {
         const fields = fieldsFromFlags(SPAWN_OWN_FLAGS);
+        const spawnId = positional[0];
         return {
           action: "spawn",
-          id: needPos(positional, 0, "oasis spawn <id> --type <t>"),
+          ...spawnId ? { id: spawnId } : {},
           type: need(flags, "type"),
           ...flags.get("title") !== void 0 ? { title: flags.get("title") } : {},
           ...(flags.get("brief") ?? flags.get("description")) !== void 0 ? { description: flags.get("brief") ?? flags.get("description") } : {},
@@ -47664,7 +48966,12 @@ async function runCli(argv, println = console.log) {
   };
   if (process.env["OASIS_STAGE"] === "1" && STAGE_COMMANDS.has(command)) {
     const op = buildStageOp(command);
-    const r = await api.post("/api/stage", { op });
+    const editWs = flags.get("workspace") ?? process.env["OASIS_WORKSPACE"];
+    const r = await api.post("/api/stage", { op, ...editWs ? { workspace: editWs } : {} });
+    if (r.draft) {
+      println(`\u5DF2\u6539\u8349\u6848\uFF1A${describeStageOp(op)}\uFF08\u5DE5\u5355 ${r.workspace}\uFF0C\u73B0 ${r.nodes} \u4E2A\u8282\u70B9\uFF1B\u4EBA\u5728\u7F16\u8F91\u5668\u786E\u8BA4\u5373\u521B\u5EFA\uFF09`);
+      return;
+    }
     let msg = `\u5DF2\u6682\u5B58\uFF1A${describeStageOp(op)}\uFF08\u7F13\u51B2 ${r.count} \u9879\uFF1B\u6539\u5B8C \`oasis apply --reason "\u2026"\` \u63D0\u4EA4\u3001\`oasis staged\` \u770B\u5168\u90E8\uFF09`;
     if (r.cascade && r.cascade.length > 0)
       msg += `
@@ -47674,29 +48981,71 @@ async function runCli(argv, println = console.log) {
   }
   switch (command) {
     case "create-workorder": {
-      const planRaw = flags.get("plan-file") !== void 0 ? fs14.readFileSync(flags.get("plan-file"), "utf8") : flags.get("plan");
+      const planRaw = flags.get("plan-file") !== void 0 ? fs15.readFileSync(flags.get("plan-file"), "utf8") : flags.get("plan");
       const acceptanceFlag = flags.get("acceptance");
       const args = {
         createdVia: "seed",
         stage: true,
         type: need(flags, "type"),
-        workspace: need(flags, "workspace"),
+        // workspace 可选：不给则服务端自动生成唯一工单 id（见 build-workorder skill：建单不必自带 ws）。
+        ...flags.get("workspace") !== void 0 ? { workspace: flags.get("workspace") } : {},
         title: need(flags, "title"),
         ...flags.get("brief") !== void 0 ? { brief: flags.get("brief") } : {},
         ...flags.get("goal") !== void 0 ? { goal: flags.get("goal") } : {},
         ...acceptanceFlag !== void 0 ? { acceptance_criteria: parseStringArrayFlag(acceptanceFlag, "acceptance") } : {},
         ...planRaw !== void 0 ? { plan: parseJsonFlag(planRaw, "plan") } : {},
         ...flags.get("project") !== void 0 ? { project_id: flags.get("project") } : {},
-        ...flags.get("dispatch") === "false" ? { dispatch: false } : {}
+        ...flags.get("dispatch") === "false" ? { dispatch: false } : {},
+        ...flags.get("allow-missing-coordinator") === "true" ? { allowMissingCoordinator: true } : {}
       };
       const res = await api.cmd("spawn", args);
       println(res.message);
       const data = res.data;
       if (data?.draftId) {
-        println(`draftId=${data.draftId}  workspace=${data.workspace}  \u8282\u70B9=${data.spawned?.length ?? 0}  \u89C4\u5212=${data.planning?.status ?? "?"}`);
+        println(`draftId=${data.draftId}  workspace=${data.workspace}  \u72B6\u6001=draft\uFF08\u8349\u6848\uFF0C\u5F85\u4EBA\u786E\u8BA4\uFF09  \u8282\u70B9=${data.spawned?.length ?? 0}  \u89C4\u5212=${data.planning?.status ?? "?"}`);
+        for (const n of data.spawned ?? []) println(`  ${n.id}  (${n.type})`);
       }
       break;
     }
+    case "workorders": {
+      const sessionId = flags.get("session");
+      if (sessionId) {
+        const res = await api.request(
+          "GET",
+          `/api/chat-sessions/${encodeURIComponent(sessionId)}/work-orders`
+        );
+        println(`\u4F1A\u8BDD ${sessionId} \u7684\u5DE5\u5355\uFF08${res.items.length}\uFF09\uFF1A`);
+        for (const w2 of res.items) {
+          const p2 = w2.progress ? ` [${w2.progress.concluded}/${w2.progress.total}]` : "";
+          println(`  ${w2.id}  ${w2.title}  [${w2.stage}]${p2}`);
+        }
+      } else {
+        const res = await api.request("GET", "/api/workorders");
+        const q = flags.get("search")?.trim().toLowerCase();
+        const items = q ? res.items.filter((w2) => `${w2.id} ${w2.title} ${w2.goal ?? ""} ${w2.description ?? ""}`.toLowerCase().includes(q)) : res.items;
+        println(`\u5DE5\u5355(${items.length}${q ? ` / \u641C\u300C${q}\u300D` : ""})\u2014\u2014\u8BE6\u60C5/\u6539\u56FE\u524D\u5148 \`oasis workorder <id>\`:`);
+        for (const w2 of items) {
+          println(`- ${w2.id}  ${w2.title}${w2.dispatchPaused ? "  [\u5F85\u6D3E\u53D1]" : ""}`);
+          println(`    \u9636\u6BB5=${w2.stage}  \u8FDB\u5EA6=${w2.progress.concluded}/${w2.progress.total}  \u8282\u70B9=${w2.artifactCount}  owner=${w2.owner.name ?? w2.owner.id}${w2.goal ? `  \u76EE\u6807: ${w2.goal}` : ""}`);
+        }
+        if (items.length === 0) println("\uFF08\u65E0\u5339\u914D\u5DE5\u5355\uFF09");
+      }
+      break;
+    }
+    case "artifacts": {
+      const workOrderId = positional[0];
+      if (!workOrderId) {
+        println("\u7528\u6CD5: oasis artifacts <workOrderId>");
+        break;
+      }
+      const res = await api.request(
+        "GET",
+        `/api/workorders/${encodeURIComponent(workOrderId)}`
+      );
+      println(`\u5DE5\u5355 ${res.summary.title} \u7684\u4EA7\u7269\uFF08${res.graph.nodes.length}\uFF09\uFF1A`);
+      for (const n of res.graph.nodes) println(`  ${n.id}  [${n.type}]  ${n.label}  stage=${n.stage}`);
+      break;
+    }
     case "projects": {
       const res = await api.request("GET", "/api/projects");
       const q = flags.get("search")?.trim().toLowerCase();
@@ -47707,6 +49056,29 @@ async function runCli(argv, println = console.log) {
       if (res.next_cursor) println("\uFF08\u8FD8\u6709\u66F4\u591A\u9879\u76EE\u672A\u5217\u5168\uFF0C\u7528 --search \u7F29\u5C0F\u8303\u56F4\uFF09");
       break;
     }
+    case "workorder": {
+      const woId = needPos(positional, 0, "oasis workorder <\u5DE5\u5355id\uFF0C\u5982 ws:wo-abc>");
+      const d = await api.request("GET", `/api/workorders/${encodeURIComponent(woId)}`);
+      const s2 = d.summary;
+      const draftNote = s2.stage === "draft" ? "\uFF08\u8349\u6848\u2014\u2014\u5F85\u4EBA\u5728\u7F16\u8F91\u5668\u786E\u8BA4\u624D\u771F\u521B\u5EFA\uFF1B\u4E0B\u9762\u7684\u8282\u70B9 id \u5DF2\u53EF\u7528\u4E8E\u6539\u8349\u6848\uFF09" : "";
+      println(`${s2.id}  ${s2.title}  \u72B6\u6001=${s2.stage}${draftNote}${s2.dispatchPaused ? "  [\u672A\u6D3E\u53D1]" : ""}`);
+      if (s2.goal) println(`\u76EE\u6807: ${s2.goal}`);
+      println(`\u8FDB\u5EA6=${s2.progress.concluded}/${s2.progress.total}  owner=${s2.owner.name ?? s2.owner.id}`);
+      if (d.acceptanceCriteria && d.acceptanceCriteria.length > 0) {
+        println("\u9A8C\u6536\u6807\u51C6:");
+        for (const a of d.acceptanceCriteria) println(`  - ${a}`);
+      }
+      println("\n\u8282\u70B9\uFF08\u6539\u56FE\u5F15\u7528\u7528\u8FD9\u4E9B id\uFF09:");
+      for (const n of d.graph.nodes) {
+        println(`  ${n.id}`);
+        println(`    type=${n.type}  \u9636\u6BB5=${n.stage}${n.blocked ? "  [\u5361\u4F4F]" : ""}  owner=${n.owner.name ?? n.owner.id}${n.label ? `  ${n.label}` : ""}`);
+      }
+      if (d.graph.edges.length > 0) {
+        println("\n\u4F9D\u8D56\u8FB9\uFF08\u6D88\u8D39\u8005 \u2192 \u4E0A\u6E38\uFF09:");
+        for (const e of d.graph.edges) println(`  ${e.from} \u2192 ${e.to}${e.required ? "" : "\uFF08\u53EF\u9009\uFF09"}`);
+      }
+      break;
+    }
     case "project": {
       const projSub = positional[0];
       if (projSub && !["create", "docs", "progress", "run-state"].includes(projSub)) {
@@ -48460,18 +49832,18 @@ var parseFlags = (argv) => {
 };
 var readConfig = () => {
   try {
-    return JSON.parse(fs15.readFileSync(CONFIG_FILE, "utf8"));
+    return JSON.parse(fs16.readFileSync(CONFIG_FILE, "utf8"));
   } catch {
     return null;
   }
 };
 var saveConfig = (c) => {
-  fs15.mkdirSync(OASIS_DIR, { recursive: true });
-  fs15.writeFileSync(CONFIG_FILE, JSON.stringify(c), { mode: 384 });
+  fs16.mkdirSync(OASIS_DIR, { recursive: true });
+  fs16.writeFileSync(CONFIG_FILE, JSON.stringify(c), { mode: 384 });
 };
 var readPid = () => {
   try {
-    const p2 = parseInt(fs15.readFileSync(PID_FILE, "utf8").trim(), 10);
+    const p2 = parseInt(fs16.readFileSync(PID_FILE, "utf8").trim(), 10);
     return isNaN(p2) ? null : p2;
   } catch {
     return null;
@@ -48487,10 +49859,10 @@ var isRunning = (pid) => {
 };
 var httpBase = (wsUrl) => wsUrl.replace(/^ws(s?):\/\//, "http$1://").replace(/\/node-gateway.*$/, "");
 function installBinary() {
-  fs15.mkdirSync(path13.dirname(BIN_FILE), { recursive: true });
-  fs15.copyFileSync(process.argv[1], BIN_FILE);
-  fs15.mkdirSync(path13.dirname(LOCAL_BIN), { recursive: true });
-  fs15.writeFileSync(LOCAL_BIN, `#!/bin/sh
+  fs16.mkdirSync(path13.dirname(BIN_FILE), { recursive: true });
+  fs16.copyFileSync(process.argv[1], BIN_FILE);
+  fs16.mkdirSync(path13.dirname(LOCAL_BIN), { recursive: true });
+  fs16.writeFileSync(LOCAL_BIN, `#!/bin/sh
 exec node "${BIN_FILE}" "$@"
 `, { mode: 493 });
 }
@@ -48505,8 +49877,8 @@ function setupAutostart() {
   const daemonPath = [process.env["PATH"] ?? "", ...extraBins].filter(Boolean).join(":");
   if (process.platform === "linux") {
     const unitDir = path13.join(os8.homedir(), ".config", "systemd", "user");
-    fs15.mkdirSync(unitDir, { recursive: true });
-    fs15.writeFileSync(path13.join(unitDir, "oasis-node.service"), [
+    fs16.mkdirSync(unitDir, { recursive: true });
+    fs16.writeFileSync(path13.join(unitDir, "oasis-node.service"), [
       "[Unit]",
       "Description=Oasis Node Daemon",
       "After=network.target",
@@ -48529,8 +49901,8 @@ function setupAutostart() {
     }
   } else if (process.platform === "darwin") {
     const plist = path13.join(os8.homedir(), "Library", "LaunchAgents", "com.oasis.node.plist");
-    fs15.mkdirSync(path13.dirname(plist), { recursive: true });
-    fs15.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?>
+    fs16.mkdirSync(path13.dirname(plist), { recursive: true });
+    fs16.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0"><dict>
   <key>Label</key><string>com.oasis.node</string>
@@ -48547,14 +49919,14 @@ function setupAutostart() {
   }
 }
 function spawnDaemon() {
-  const log3 = fs15.openSync(LOG_FILE, "a");
+  const log3 = fs16.openSync(LOG_FILE, "a");
   const child = (0, import_node_child_process10.spawn)(process.execPath, [BIN_FILE, "--_daemon"], {
     detached: true,
     stdio: ["ignore", log3, log3]
   });
   child.unref();
   const pid = child.pid ?? 0;
-  fs15.writeFileSync(PID_FILE, String(pid));
+  fs16.writeFileSync(PID_FILE, String(pid));
   return pid;
 }
 function stopDaemon() {
@@ -48566,7 +49938,7 @@ function stopDaemon() {
     }
   }
   try {
-    fs15.unlinkSync(PID_FILE);
+    fs16.unlinkSync(PID_FILE);
   } catch {
   }
   try {
@@ -48587,10 +49959,10 @@ void (async () => {
       console.error("[oasis] no config \u2014 run `oasis start` first");
       process.exit(1);
     }
-    fs15.writeFileSync(PID_FILE, String(process.pid));
+    fs16.writeFileSync(PID_FILE, String(process.pid));
     const cleanup = () => {
       try {
-        fs15.unlinkSync(PID_FILE);
+        fs16.unlinkSync(PID_FILE);
       } catch {
       }
     };